Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '[localhost]:60788' (ECDSA) to the list of known hosts.
syzkaller login: [  115.354521][   T39] kauditd_printk_skb: 6 callbacks suppressed
[  115.354532][   T39] audit: type=1400 audit(1579177627.753:42): avc:  denied  { map } for  pid=8759 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
2020/01/16 12:27:07 fuzzer started
2020/01/16 12:27:09 dialing manager at 10.0.2.10:38671
2020/01/16 12:27:10 syscalls: 2863
2020/01/16 12:27:10 code coverage: enabled
2020/01/16 12:27:10 comparison tracing: enabled
2020/01/16 12:27:10 extra coverage: enabled
2020/01/16 12:27:10 setuid sandbox: enabled
2020/01/16 12:27:10 namespace sandbox: enabled
2020/01/16 12:27:10 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/16 12:27:10 fault injection: enabled
2020/01/16 12:27:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/16 12:27:10 net packet injection: enabled
2020/01/16 12:27:10 net device setup: enabled
2020/01/16 12:27:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/01/16 12:27:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
12:28:01 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000040), 0x0, 0x80)

[  168.962846][   T39] audit: type=1400 audit(1579177681.363:43): avc:  denied  { map } for  pid=8784 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=56 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
12:28:01 executing program 1:
r0 = epoll_create1(0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0)

12:28:01 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept4(r1, 0x0, 0x0, 0x0)
write$binfmt_misc(r2, 0x0, 0x0)

[  169.546020][ T8787] IPVS: ftp: loaded support on port[0] = 21
[  169.546356][ T8785] IPVS: ftp: loaded support on port[0] = 21
12:28:01 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'ipvlan1\x00', {0x2, 0x4e20, @multicast1}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0x5450, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
write$binfmt_elf64(r1, 0x0, 0x0)

[  169.557928][ T8789] IPVS: ftp: loaded support on port[0] = 21
[  169.768931][ T8791] IPVS: ftp: loaded support on port[0] = 21
[  169.902794][ T8785] chnl_net:caif_netlink_parms(): no params data found
[  169.981570][ T8787] chnl_net:caif_netlink_parms(): no params data found
[  169.998323][ T8789] chnl_net:caif_netlink_parms(): no params data found
[  170.070658][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.087688][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.114828][ T8785] device bridge_slave_0 entered promiscuous mode
[  170.151801][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.168453][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.184431][ T8785] device bridge_slave_1 entered promiscuous mode
[  170.229714][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.252481][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.267183][ T8789] device bridge_slave_0 entered promiscuous mode
[  170.289687][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.298601][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.311384][ T8789] device bridge_slave_1 entered promiscuous mode
[  170.343936][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.353404][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.363315][ T8787] device bridge_slave_0 entered promiscuous mode
[  170.387203][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.413145][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.436278][ T8787] device bridge_slave_1 entered promiscuous mode
[  170.492133][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.533861][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.569746][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.589632][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.618250][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.632791][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.664052][ T8789] team0: Port device team_slave_0 added
[  170.680953][ T8789] team0: Port device team_slave_1 added
[  170.693749][ T8791] chnl_net:caif_netlink_parms(): no params data found
[  170.711189][ T8787] team0: Port device team_slave_0 added
[  170.731689][ T8787] team0: Port device team_slave_1 added
[  170.757496][ T8785] team0: Port device team_slave_0 added
[  170.770465][ T8785] team0: Port device team_slave_1 added
[  170.859003][ T8787] device hsr_slave_0 entered promiscuous mode
[  170.927021][ T8787] device hsr_slave_1 entered promiscuous mode
[  171.058251][ T8789] device hsr_slave_0 entered promiscuous mode
[  171.115944][ T8789] device hsr_slave_1 entered promiscuous mode
[  171.195887][ T8789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.208420][ T8789] Cannot create hsr debugfs directory
[  171.348756][ T8785] device hsr_slave_0 entered promiscuous mode
[  171.416864][ T8785] device hsr_slave_1 entered promiscuous mode
[  171.475743][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.491115][ T8785] Cannot create hsr debugfs directory
[  171.510504][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.522910][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.538432][ T8791] device bridge_slave_0 entered promiscuous mode
[  171.566187][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.598191][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.617524][ T8791] device bridge_slave_1 entered promiscuous mode
[  171.730436][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.771843][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.832370][ T8791] team0: Port device team_slave_0 added
[  171.865291][ T8791] team0: Port device team_slave_1 added
[  171.898497][   T39] audit: type=1400 audit(1579177684.303:44): avc:  denied  { create } for  pid=8787 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  171.920105][ T8787] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.941475][   T39] audit: type=1400 audit(1579177684.313:45): avc:  denied  { write } for  pid=8787 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  171.941494][   T39] audit: type=1400 audit(1579177684.313:46): avc:  denied  { read } for  pid=8787 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  172.061352][ T8787] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  172.178806][ T8791] device hsr_slave_0 entered promiscuous mode
[  172.226317][ T8791] device hsr_slave_1 entered promiscuous mode
[  172.286328][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.295988][ T8791] Cannot create hsr debugfs directory
[  172.311570][ T8789] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  172.409070][ T8787] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  172.470304][ T8785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  172.537857][ T8789] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  172.597592][ T8787] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  172.692819][ T8785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  172.780563][ T8789] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  172.879908][ T8789] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  172.941997][ T8785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  173.030792][ T8785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  173.174635][ T8791] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  173.268209][ T8791] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  173.358684][ T8791] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  173.437885][ T8791] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  173.639698][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.668174][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.684044][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.755162][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.777961][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.829581][ T8789] 8021q: adding VLAN 0 to HW filter on device team0
[  173.864344][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.875984][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.888705][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.903606][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.919295][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.934482][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.948145][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.960005][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.972483][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.988663][ T8785] 8021q: adding VLAN 0 to HW filter on device team0
[  174.004647][ T8787] 8021q: adding VLAN 0 to HW filter on device team0
[  174.026824][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.047051][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.060898][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.073505][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.086814][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.102284][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.116352][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.128849][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.148714][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.187667][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.209570][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.225352][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.246855][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.273763][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.291004][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.313744][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.330020][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.341461][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.353949][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.373876][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.394419][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.407216][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.440957][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.454393][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.464832][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.479662][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.498083][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.515370][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.533191][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.548018][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.562772][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  174.579272][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.592140][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.602924][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.614881][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.623963][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.641277][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.651004][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.661966][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  174.671856][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.683359][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.696096][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.708837][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.731808][ T8791] 8021q: adding VLAN 0 to HW filter on device team0
[  174.756169][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.770980][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.790857][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.806421][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.825819][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.846542][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  174.865286][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.878493][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.895951][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.908173][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.923592][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.932167][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.942744][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.962078][ T8785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.977264][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.992885][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.007109][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.021069][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.033898][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.044575][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.053915][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.077076][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.087073][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.098395][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.106762][ T8792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.116714][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.128758][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.140163][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.158228][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.170555][ T8787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.190662][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.202378][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.212999][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.237375][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.248704][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.258474][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.268823][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.278772][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.287655][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.296999][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.306375][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.316002][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.327566][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.347264][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.356192][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.366531][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.375345][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.393705][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.409956][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.428339][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  175.438409][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  175.452392][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.461798][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.479850][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.500671][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  175.510934][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  175.521585][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  175.531949][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  175.542823][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.554069][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.577300][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  175.598204][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  175.620956][ T8785] device veth0_vlan entered promiscuous mode
[  175.656556][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  175.673726][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  175.690240][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  175.703496][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  175.719867][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.735982][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.754120][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.767010][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.783199][ T8787] device veth0_vlan entered promiscuous mode
[  175.803861][ T8789] device veth0_vlan entered promiscuous mode
[  175.821416][ T8785] device veth1_vlan entered promiscuous mode
[  175.842089][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  175.859259][ T8804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  175.879866][ T8787] device veth1_vlan entered promiscuous mode
[  175.899521][ T8789] device veth1_vlan entered promiscuous mode
[  175.923671][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  175.938989][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  175.953290][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  175.966409][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  175.980561][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  175.992325][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.007801][ T8791] device veth0_vlan entered promiscuous mode
[  176.016570][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.025954][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.042084][   T39] audit: type=1400 audit(1579177688.443:47): avc:  denied  { associate } for  pid=8787 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[  176.052071][ T8791] device veth1_vlan entered promiscuous mode
12:28:08 executing program 2:

12:28:08 executing program 1:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

12:28:08 executing program 0:

12:28:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x0)

12:28:08 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:08 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'ipvlan1\x00', {0x2, 0x4e20, @multicast1}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0x5450, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
write$binfmt_elf64(r1, 0x0, 0x0)

12:28:08 executing program 1:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

12:28:08 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0)

12:28:08 executing program 1:
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$inet6(r1, &(0x7f0000000100)='y', 0x1, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000140), 0x0, 0x2160, 0x0, 0x989ff5100ffa221f)

12:28:08 executing program 3:
capset(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640))
semget(0x0, 0x0, 0x208)

12:28:08 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x21)
write$P9_RSYMLINK(r0, 0x0, 0x0)

12:28:08 executing program 3:
capset(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640))
semget(0x0, 0x0, 0x208)

[  176.657113][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  176.678841][ T2607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
12:28:09 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
dup(r0)

12:28:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x129f0817)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x401, {{0x2, 0x4e24, @local}}}, 0x88)

12:28:09 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:09 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:09 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:09 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r0)
socket$unix(0x1, 0x1, 0x0)
tkill(r1, 0x1000000000016)

12:28:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = dup2(r0, r0)
sendmmsg$unix(r1, &(0x7f0000000940)=[{0x0, 0x0, 0x0}], 0x1, 0x4850)

12:28:09 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$unix(0x1, 0x20000000001, 0x0)
tkill(r1, 0x1000000000016)

12:28:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:09 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)

12:28:09 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x89a1, 0x0)

12:28:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:10 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0xfffffffffffffffd, 0x0)

12:28:10 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c05, 0xffffffffffffffff)

12:28:10 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = dup2(r0, r0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)

12:28:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r1 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r1, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

12:28:10 executing program 2:
process_vm_readv(0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0xfffffffffffffffe, 0x0, 0x0)

12:28:11 executing program 2:
process_vm_readv(0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0xfffffffffffffffe, 0x0, 0x0)

12:28:11 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)

12:28:11 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r1 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r1, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

12:28:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

12:28:11 executing program 2:
process_vm_readv(0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0xfffffffffffffffe, 0x0, 0x0)

12:28:11 executing program 2:
process_vm_readv(0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0xfffffffffffffffe, 0x0, 0x0)

12:28:11 executing program 2:
process_vm_readv(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0)

12:28:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

12:28:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)

12:28:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)

12:28:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
write$P9_RLOPEN(r1, 0x0, 0x0)

12:28:12 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="3c1fbde51747c700a0e92096fd47192a", 0x10)

12:28:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r1 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r1, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

12:28:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
write$P9_RLOPEN(r1, 0x0, 0x0)

12:28:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="3c1fbde51747c700a0e92096fd47192a", 0x10)

12:28:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), 0x4)

12:28:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = dup2(r0, r0)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0)

12:28:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

12:28:14 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:14 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817)
write$binfmt_script(r1, 0x0, 0x0)

12:28:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:14 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:14 executing program 3:
pipe2(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x0)
flistxattr(r0, 0x0, 0x0)

12:28:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:14 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817)
getsockopt$inet_buf(r1, 0x0, 0x0, 0x0, &(0x7f0000000180))

12:28:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
write$P9_RXATTRWALK(r1, 0x0, 0x0)

12:28:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
dup2(r0, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
read(r0, &(0x7f0000000000)=""/68, 0x44)
close(r0)
r1 = gettid()
tkill(r1, 0x1000000000016)

12:28:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
dup2(r0, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:16 executing program 3:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

12:28:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
dup2(r0, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:18 executing program 2:
r0 = epoll_create(0x4)
epoll_wait(r0, &(0x7f0000001b00)=[{}], 0x1, 0x3f)

12:28:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:18 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:18 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
accept4(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x80, 0x800)

12:28:18 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
accept4(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x80, 0x800)

12:28:18 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close(r2)
socket(0x11, 0x3, 0x0)
tkill(r1, 0x1000000000016)

12:28:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
fchdir(r0)

12:28:18 executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syzkaller0\x00'})

12:28:18 executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
r1 = dup2(r0, r0)
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
write$P9_RVERSION(r1, 0x0, 0x0)

12:28:18 executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:18 executing program 3:
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={0x0, 0x2eda3d306f2de937, &(0x7f0000000140)={0x0}}, 0x0)

12:28:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817)
setsockopt$inet_group_source_req(r1, 0x0, 0x0, 0x0, 0x0)

12:28:18 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = dup2(r0, r0)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x19b}}, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = gettid()
tkill(r2, 0x1000000000016)

12:28:19 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:19 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:19 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:21 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
close(r0)
socket$unix(0x1, 0x20000000001, 0x0)
tkill(r1, 0x1000000000016)

12:28:21 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = dup2(r0, r0)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000))
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x15}, @val={0x1, 0x4, 0x0, 0x2, 0x3, 0x7}, @ipv4=@igmp={{0xa, 0x4, 0x0, 0x1, 0x30, 0x66, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x1, @local, {[@rr={0x7, 0x13, 0x1e, [@empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @noop]}}, {0x22, 0x53, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x3e)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000100))
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1180000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x3a9aa5182288808d}, 0x804)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c0d2}, 0x20000000)
r6 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={<r7=>0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x12, r7})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
close(r0)
r8 = gettid()
tkill(r8, 0x1000000000016)

12:28:22 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441)
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040085)

12:28:22 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r1)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:22 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x402c088)

12:28:25 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:25 executing program 2:
r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r1, r0)
ioctl$BLKSECDISCARD(r2, 0x127d, 0x0)

12:28:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:25 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

[  192.654398][   T39] audit: type=1400 audit(1579177705.053:48): avc:  denied  { ioctl } for  pid=9247 comm="syz-executor.2" path="socket:[39563]" dev="sockfs" ino=39563 ioctlcmd=0x127d scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
12:28:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f)
r1 = dup2(r0, r0)
read$char_usb(r1, &(0x7f0000000340)=""/220, 0xdc)

12:28:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
close(r2)
tkill(r1, 0x1000000000016)

12:28:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r0)
tkill(r1, 0x1000000000016)

12:28:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:28 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = dup2(r0, r0)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x1000000000016)

12:28:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = dup2(r0, r0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffde5, &(0x7f00000001c0)={0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
close(r0)
socket$unix(0x1, 0x20000000001, 0x0)
tkill(r1, 0x1000000000016)

12:28:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:28 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

12:28:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = dup2(r0, r0)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x1000000000016)

12:28:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:28 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000000)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
shutdown(r0, 0x0)

12:28:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:28 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:28 executing program 2:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:28 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)

12:28:28 executing program 2:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:28 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xa197c901)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14)
splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0)

12:28:28 executing program 2:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:28 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:31 executing program 2:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:31 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

12:28:31 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
r2 = dup2(r0, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000002ec0)=[{&(0x7f0000000000)=@abs={0xea16832932b38620}, 0x6e, 0x0}], 0x1, 0x0)
close(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
tkill(r1, 0x1000000000016)

12:28:31 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4000000000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

12:28:31 executing program 2:
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

[  199.009305][   T39] audit: type=1400 audit(1579177711.413:49): avc:  denied  { open } for  pid=9355 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[  199.082517][   T39] audit: type=1400 audit(1579177711.413:50): avc:  denied  { kernel } for  pid=9355 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
12:28:31 executing program 2:
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:31 executing program 2:
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:31 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

12:28:31 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fusectl\x00', 0x0, 0x0)

[  199.845857][    C2] hrtimer: interrupt took 25725 ns
[  337.548117][ T8799] ------------[ cut here ]------------
[  337.567152][ T8799] Type was not set for devlink port.
[  337.576794][ T8799] WARNING: CPU: 0 PID: 8799 at net/core/devlink.c:6399 devlink_port_type_warn+0x15/0x20
[  337.576794][ T8799] Kernel panic - not syncing: panic_on_warn set ...
[  337.576794][ T8799] CPU: 0 PID: 8799 Comm: kworker/0:3 Not tainted 5.5.0-rc6-syzkaller #0
[  337.576794][ T8799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  337.576794][ T8799] Workqueue: events devlink_port_type_warn
[  337.576794][ T8799] Call Trace:
[  337.576794][ T8799]  dump_stack+0x197/0x210
[  337.576794][ T8799]  ? devlink_free+0x2d0/0x2f0
[  337.576794][ T8799]  panic+0x2e3/0x75c
[  337.576794][ T8799]  ? add_taint.cold+0x16/0x16
[  337.576794][ T8799]  ? __kasan_check_write+0x14/0x20
[  337.576794][ T8799]  ? __warn.cold+0x14/0x3e
[  337.576794][ T8799]  ? __warn+0xd9/0x1cf
[  337.576794][ T8799]  ? devlink_port_type_warn+0x15/0x20
[  337.576794][ T8799]  __warn.cold+0x2f/0x3e
[  337.576794][ T8799]  ? devlink_port_type_warn+0x15/0x20
[  337.576794][ T8799]  report_bug+0x289/0x300
[  337.576794][ T8799]  do_error_trap+0x11b/0x200
[  337.576794][ T8799]  do_invalid_op+0x37/0x50
[  337.576794][ T8799]  ? devlink_port_type_warn+0x15/0x20
[  337.576794][ T8799]  invalid_op+0x23/0x30
[  337.576794][ T8799] RIP: 0010:devlink_port_type_warn+0x15/0x20
[  337.576794][ T8799] Code: 89 df e8 de fc 7d fb e9 d3 fe ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 57 3d 40 fb 48 c7 c7 e0 56 d8 88 e8 ea ec 10 fb <0f> 0b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 55 49 89 f5 41 54
[  337.576794][ T8799] RSP: 0018:ffffc90000fd7d30 EFLAGS: 00010282
[  337.576794][ T8799] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  337.576794][ T8799] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520001faf98
[  337.576794][ T8799] RBP: ffffc90000fd7d30 R08: ffff88805c338300 R09: fffffbfff165e7b6
[  337.576794][ T8799] R10: fffffbfff165e7b5 R11: ffffffff8b2f3daf R12: ffff888027c8a0c0
[  337.576794][ T8799] R13: 0000000000000000 R14: ffff888023289700 R15: ffff88802d036b40
[  337.576794][ T8799]  ? vprintk_func+0x86/0x189
[  337.576794][ T8799]  process_one_work+0x9af/0x1740
[  337.576794][ T8799]  ? pwq_dec_nr_in_flight+0x320/0x320
[  337.576794][ T8799]  ? lock_acquire+0x190/0x410
[  337.576794][ T8799]  worker_thread+0x98/0xe40
[  337.576794][ T8799]  ? trace_hardirqs_on+0x67/0x240
[  337.576794][ T8799]  kthread+0x361/0x430
[  337.576794][ T8799]  ? process_one_work+0x1740/0x1740
[  337.576794][ T8799]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[  337.576794][ T8799]  ret_from_fork+0x24/0x30
[  337.576794][ T8799] Kernel Offset: disabled
[  337.576794][ T8799] Rebooting in 86400 seconds..