nconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 2030.863348] audit: type=1400 audit(1542801050.003:455): avc: denied { create } for pid=18354 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 2030.897985] audit: type=1400 audit(1542801050.043:456): avc: denied { create } for pid=18354 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 2030.930190] audit: type=1400 audit(1542801050.073:457): avc: denied { create } for pid=18354 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:50:52 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000000200), 0x2008000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 11:50:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r1 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) 11:50:52 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$binfmt_aout(r4, &(0x7f0000000880)={{0x10f, 0xe, 0x0, 0x33d, 0x261, 0x81, 0x1b4}, "739c3316016123f8cd26441ecc674eac06ac64c0d8839ed7bbe413e2ba6623339689d93f2a41af30c1b5ff13ec6e2ad5e149f1672cf7927c5019c288e2586a040a12e3e5850327843e67cba5062cef06", [[], [], []]}, 0x370) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x0, 0x5, 0x0, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 11:50:52 executing program 5: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:52 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000000200), 0x2008000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 11:50:52 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x5000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x179}}, 0x0) 11:50:52 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x5000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x179}}, 0x0) 11:50:52 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x5000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x179}}, 0x0) 11:50:52 executing program 0: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:52 executing program 4: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x5000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x179}}, 0x0) 11:50:52 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000000200), 0x2008000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 11:50:52 executing program 5: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[]}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001d8, 0x0) 11:50:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[]}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001d8, 0x0) 11:50:53 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$binfmt_aout(r4, &(0x7f0000000880)={{0x10f, 0xe, 0x0, 0x33d, 0x261, 0x81, 0x1b4}, "739c3316016123f8cd26441ecc674eac06ac64c0d8839ed7bbe413e2ba6623339689d93f2a41af30c1b5ff13ec6e2ad5e149f1672cf7927c5019c288e2586a040a12e3e5850327843e67cba5062cef06", [[], [], []]}, 0x370) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x0, 0x5, 0x0, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 11:50:53 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000000200), 0x2008000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 11:50:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[]}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001d8, 0x0) 11:50:53 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000000200), 0x2008000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 11:50:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[]}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001d8, 0x0) 11:50:53 executing program 4: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000040), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xdd}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:50:53 executing program 0: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0xe) prctl$PR_GET_NO_NEW_PRIVS(0x27) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x80000000075, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:50:53 executing program 5: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:54 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x6, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) creat(&(0x7f0000000100)='./control\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 11:50:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) dup2(r0, r2) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003b00)}}], 0x1, 0x0, &(0x7f0000000040)) close(r1) 11:50:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) dup2(r0, r2) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003b00)}}], 0x1, 0x0, &(0x7f0000000040)) close(r1) 11:50:54 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$binfmt_aout(r4, &(0x7f0000000880)={{0x10f, 0xe, 0x0, 0x33d, 0x261, 0x81, 0x1b4}, "739c3316016123f8cd26441ecc674eac06ac64c0d8839ed7bbe413e2ba6623339689d93f2a41af30c1b5ff13ec6e2ad5e149f1672cf7927c5019c288e2586a040a12e3e5850327843e67cba5062cef06", [[], [], []]}, 0x370) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x0, 0x5, 0x0, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 11:50:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) dup2(r0, r2) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003b00)}}], 0x1, 0x0, &(0x7f0000000040)) close(r1) 11:50:54 executing program 5: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0xe) prctl$PR_GET_NO_NEW_PRIVS(0x27) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x80000000075, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:50:54 executing program 0: r0 = memfd_create(&(0x7f0000000080), 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x7ff, 0x8000, 0x100, 0x1ff}) getgroups(0x8, &(0x7f00000003c0)=[0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setresgid(0x0, r1, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x0) pipe(&(0x7f0000000180)) sendfile(r0, r5, &(0x7f0000000000)=0x3, 0x7efffffd) 11:50:54 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, &(0x7f0000000200), 0x2008000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x0, r3+10000000}, &(0x7f00000002c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 11:50:55 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:50:55 executing program 0: unshare(0x20000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r0, 0x0) 11:50:55 executing program 0: unshare(0x20000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r0, 0x0) 11:50:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) dup2(r0, r2) recvmmsg(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003b00)}}], 0x1, 0x0, &(0x7f0000000040)) close(r1) 11:50:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0xe) prctl$PR_GET_NO_NEW_PRIVS(0x27) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x80000000075, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:50:55 executing program 0: unshare(0x20000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r0, 0x0) 11:50:56 executing program 0: unshare(0x20000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r0, 0x0) 11:50:56 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/115, 0x73}], 0x1) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000040)=""/13, 0xd}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x25b) 11:50:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) write(r0, &(0x7f0000000180)="1100000014000707030e0000120f0a0051", 0x11) 11:50:56 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000440)="0795040000000029a77ce74fb58ddf0000356317b447d19ecd38b972a4220aae9720fe2c59e090b66f8fc48c26002c72a757a85b0700000000000000023f0683a2aaa95f07af2c1e2f6d8908", 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) [ 2037.107616] audit: type=1400 audit(1542801056.253:458): avc: denied { create } for pid=18547 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:50:56 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 2037.147885] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.166995] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.181978] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.189676] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.197004] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.204017] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.210702] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.223592] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.230285] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.237242] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 11:50:56 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 2037.243953] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2037.256002] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz1 11:50:56 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000440)="0795040000000029a77ce74fb58ddf0000356317b447d19ecd38b972a4220aae9720fe2c59e090b66f8fc48c26002c72a757a85b0700000000000000023f0683a2aaa95f07af2c1e2f6d8908", 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) 11:50:56 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 2037.318042] audit: type=1400 audit(1542801056.463:459): avc: denied { create } for pid=18547 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:50:56 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0xe) prctl$PR_GET_NO_NEW_PRIVS(0x27) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x80000000075, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:50:56 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:56 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:56 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 2037.879188] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.895058] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.910204] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.925491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.932997] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.940384] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.947563] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.954869] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.961996] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 11:50:57 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/115, 0x73}], 0x1) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000040)=""/13, 0xd}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x25b) 11:50:57 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:50:57 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000440)="0795040000000029a77ce74fb58ddf0000356317b447d19ecd38b972a4220aae9720fe2c59e090b66f8fc48c26002c72a757a85b0700000000000000023f0683a2aaa95f07af2c1e2f6d8908", 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) 11:50:57 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 2037.979243] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2037.988715] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2038.005717] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz1 [ 2038.109198] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.124024] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.133775] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.140664] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.147924] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.155456] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.162354] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.169572] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.176901] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.185137] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2038.193326] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 11:50:57 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 2038.206923] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz1 11:50:57 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:57 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:57 executing program 0: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:57 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:50:57 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:50:57 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40000002e) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0xfffffffffffff000, 0x1a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:50:57 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:50:58 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/115, 0x73}], 0x1) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000040)=""/13, 0xd}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x25b) 11:50:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) 11:50:58 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000440)="0795040000000029a77ce74fb58ddf0000356317b447d19ecd38b972a4220aae9720fe2c59e090b66f8fc48c26002c72a757a85b0700000000000000023f0683a2aaa95f07af2c1e2f6d8908", 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) 11:50:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) writev(r0, &(0x7f0000000100), 0x0) write$9p(r0, &(0x7f0000000300), 0x0) [ 2038.934760] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.942769] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.956927] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.967271] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.974397] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.981071] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.992289] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2038.998990] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2039.008128] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2039.015788] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 2039.022495] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x3, 0x0, 0xfffffffffffffd22) [ 2039.039519] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz1 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 2: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x3, 0x0, 0xfffffffffffffd22) 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/115, 0x73}], 0x1) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000040)=""/13, 0xd}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x25b) 11:50:58 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 11:50:58 executing program 2: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x3, 0x0, 0xfffffffffffffd22) 11:50:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8cff7cb9080000005345204c696e75781600000046bf2745b58c000000000002ab000082570040000000000000de00df000000000005009803000000010000000100000099154a1605b73b8459dccffb5111c78c143aef12b8f3fee7bbdd7b0734bfbc0aa67355e490efeda76561e1c6db39bb759cb68d7d5ab034518e98b054bda163ca2d8b30b30e010000001be747c81f0b1c8a2b32ec0000000000325ef17cabeacb479377e3a8860f3716b93c32695555b22d31fc000000000000954b6fe3576a8c8f5082610000000000001aa4344925d5f75ae0f06085367616dd4d9247135b34edd54db1cbadd56824c0498e9d951a53a843c4cf2dc242141a7d8a2a0fe65662d14d05660bd4f0dd968067a3982112b9091ca0dcd064a0cbce7afe7d3de045f0ca63990c0c59abc7da916bde2feba9f0da71651d20f8f0dcc96c881344565ccc14e4ac140c00883203eac90db8e51622fb2caa5e391d34ec5c0823ed877fe3ee8ec8496a1e34ba33e03f2ace45f81200000000000000000000000000"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 11:50:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sync_file_range(0xffffffffffffffff, 0x663, 0xfffffffffffffffe, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 11:50:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x3, 0x0, 0xfffffffffffffd22) 11:50:58 executing program 4: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 2039.762232] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.787499] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.801783] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 11:50:58 executing program 2: perf_event_open(&(0x7f0000000f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 2039.809063] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.817121] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.824750] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.832112] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.841295] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.849246] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 11:50:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_set$pid(0x1, 0x0, 0x800004000) clone(0x210807fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2039.862740] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.869939] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2039.884619] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz1 11:50:59 executing program 4: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 2039.911439] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:50:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff}, 0x1c) 11:50:59 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r2 = dup2(r0, r1) sendto$inet(r2, &(0x7f0000000180), 0x0, 0x8000, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) 11:50:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) flock(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='.\x00', 0x0) fallocate(r1, 0x20, 0x0, 0x10000) 11:50:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x2b, 0x0, &(0x7f0000000600)={&(0x7f0000000580)="65f0fe410040dde2f3ad79058fe830875daf2dc4a16e59942d91300000263e66660f38257900c481f557d2f3446fc4a259ac45fe", {}, 0x0, &(0x7f00000005c0)="c4e141db616b42de39c46135685b6ff30f52b0ab1ef7e426660f38156baf2e67420f1854b5d2f3dbecc462b2f57f07f30f11423e8fa858cc2a76"}, 0x8, &(0x7f0000000640)) [ 2040.598388] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:50:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:50:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 11:50:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 11:50:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={"73797a5f74756e000000000100", &(0x7f0000000540)=@ethtool_rxfh_indir={0x39}}) 11:50:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x5) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a3100000000000000001000000000000000080000000000000004aa63f6e029b94f00"}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:50:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000), 0x1) 11:50:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) [ 2040.707682] input: syz1 as /devices/virtual/input/input348 11:50:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 11:51:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 11:51:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:51:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) [ 2040.952856] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:51:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) [ 2041.185573] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c [ 2041.252507] input: syz1 as /devices/virtual/input/input349 [ 2041.283754] ip6_tunnel: À xmit: Local address not yet configured! [ 2041.333851] ip6_tunnel: À xmit: Local address not yet configured! 11:51:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:51:00 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet6_buf(r0, 0x29, 0x80000000000010, &(0x7f0000000040), 0x0) 11:51:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:51:00 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)="7369743000000000eaff00", 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f0000000040), 0x3d2) close(r1) tkill(r0, 0x1004000000016) 11:51:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8cff7cb9080000005345204c696e75781600000046bf2745b58c000000000002ab000082570040000000000000de00df000000000005009803000000010000000100000099154a1605b73b8459dccffb5111c78c143aef12b8f3fee7bbdd7b0734bfbc0aa67355e490efeda76561e1c6db39bb759cb68d7d5ab034518e98b054bda163ca2d8b30b30e010000001be747c81f0b1c8a2b32ec0000000000325ef17cabeacb479377e3a8860f3716b93c32695555b22d31fc000000000000954b6fe3576a8c8f5082610000000000001aa4344925d5f75ae0f06085367616dd4d9247135b34edd54db1cbadd56824c0498e9d951a53a843c4cf2dc242141a7d8a2a0fe65662d14d05660bd4f0dd968067a3982112b9091ca0dcd064a0cbce7afe7d3de045f0ca63990c0c59abc7da916bde2feba9f0da71651d20f8f0dcc96c881344565ccc14e4ac140c00883203eac90db8e51622fb2caa5e391d34ec5c0823ed877fe3ee8ec8496a1e34ba33e03f2ace45f81200000000000000000000000000"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:51:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 11:51:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20395dd4) 11:51:00 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x84000482) 11:51:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000300)=""/203, 0xcb, 0x0, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}, 0x80) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvfrom(r1, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x80) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) [ 2041.891362] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:51:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) sendto$inet6(r1, &(0x7f0000000540), 0x0, 0x100000020000008, &(0x7f00008d4fe4), 0x1c) 11:51:01 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f0000000080)='.\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000200)={0x0, 0x70, 0x8, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x101, 0x0, 0x81, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x6}) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') [ 2041.953596] ip6_tunnel: À xmit: Local address not yet configured! 11:51:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x7a, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, './cgroup.cpu\x00', 0x5, '@#%)!', 0xd, './cgroup.cpu\x00', 0x6, 'vmnet0'}, 0xd, './cgroup.cpu\x00'}}, 0x7a) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) [ 2042.028850] audit: type=1400 audit(1542801061.173:460): avc: denied { create } for pid=18896 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2042.070466] audit: type=1400 audit(1542801061.213:461): avc: denied { create } for pid=18896 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2042.094651] ip6_tunnel: À xmit: Local address not yet configured! [ 2042.175908] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:51:01 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f0000000080)='.\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000200)={0x0, 0x70, 0x8, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x101, 0x0, 0x81, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x6}) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') 11:51:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:51:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) 11:51:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:51:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000740)) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xfffffffffffffffc) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4000000004e24, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa80fd88f509538e0fd01770646bc16b7fcf25bcd2c6f107ea1d322f28c38dacabc496cf02ce86976a", 0x4e, 0xfffffffffffffffa) connect$inet(r5, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180) sendfile(r1, r6, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:51:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000010002908000000000000000003000000080001000f7987d41e6288ae5b43e6011e14aef29b5a2a47e2a5594779b5df007826f44a28dad1d6625986c9aae9ca0ca2bc87b2115c0ae6e4920d310dee1832b914ca633d39d03d66055c31cccfdc676d625ef93b669d65c06b57e88b7ac0d300fcdadfc3ce9f26721a5edf0462cde2ca9a2fc35c4466a617b6555eceaba83406234458f998412d0486ede16358b5c74f08284af7a25e0251d3db234e67d79e81e186e12750e8d0f73748a20ac481a950c5e8aebb2e596edff373da7c06219871bdfbef046deab9de0002000000000000cf179a47676ff3be33225834dde4a92fe31a39", @ANYRES32=0x0], 0x2}}, 0x0) [ 2042.682821] audit: type=1400 audit(1542801061.823:462): avc: denied { create } for pid=18919 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2042.686115] audit: type=1400 audit(1542801061.833:463): avc: denied { create } for pid=18924 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x2, 0x28002) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x11, 0x4}], 0x18) 11:51:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\''], 0x1) madvise(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xa) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 2042.687755] audit: type=1400 audit(1542801061.833:464): avc: denied { create } for pid=18924 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2042.689275] audit: type=1400 audit(1542801061.833:465): avc: denied { associate } for pid=18920 comm="syz-executor0" name="tun" dev="devtmpfs" ino=1094 scontext=system_u:object_r:auditd_initrc_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=0 11:51:01 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f0000000080)='.\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000200)={0x0, 0x70, 0x8, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x101, 0x0, 0x81, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x6}) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') 11:51:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x80, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 2042.863703] ip6_tunnel: À xmit: Local address not yet configured! [ 2042.880853] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:51:02 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f0000000080)='.\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000200)={0x0, 0x70, 0x8, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x101, 0x0, 0x81, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x6}) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') [ 2042.917164] audit: type=1400 audit(1542801062.063:466): avc: denied { create } for pid=18940 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2042.967528] audit: type=1400 audit(1542801062.113:467): avc: denied { create } for pid=18944 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000380), 0x2f1, &(0x7f0000000600)}, 0x80000000}], 0x4000234, 0x0) 11:51:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) [ 2043.033700] ip6_tunnel: À xmit: Local address not yet configured! 11:51:02 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000007c0), 0x33d}]) [ 2043.256836] SELinux: policydb magic number 0xb97cff8c does not match expected magic number 0xf97cff8c 11:51:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000007c0), 0x33d}]) 11:51:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x2, 0x28002) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x11, 0x4}], 0x18) 11:51:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:03 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) unshare(0x40600) r0 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000880), 0x24, 0x0) 11:51:03 executing program 3: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x5e9) sendto$inet6(r1, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 11:51:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2043.883694] ip6_tunnel: À xmit: Local address not yet configured! 11:51:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000007c0), 0x33d}]) 11:51:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x2, 0x28002) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x11, 0x4}], 0x18) 11:51:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000007c0), 0x33d}]) 11:51:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x2, 0x28002) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x11, 0x4}], 0x18) 11:51:03 executing program 4: clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000c35ffc), &(0x7f0000000140)) getgid() 11:51:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:51:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:03 executing program 3: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x5e9) sendto$inet6(r1, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 11:51:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:51:03 executing program 3: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x5e9) sendto$inet6(r1, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 11:51:03 executing program 4: clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000c35ffc), &(0x7f0000000140)) getgid() 11:51:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:04 executing program 4: clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000c35ffc), &(0x7f0000000140)) getgid() 11:51:04 executing program 4: clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000c35ffc), &(0x7f0000000140)) getgid() 11:51:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:51:04 executing program 3: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x5e9) sendto$inet6(r1, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 11:51:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:05 executing program 3: r0 = timerfd_create(0x0, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)) timerfd_gettime(r0, &(0x7f00000000c0)) 11:51:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:05 executing program 3: r0 = timerfd_create(0x0, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)) timerfd_gettime(r0, &(0x7f00000000c0)) 11:51:05 executing program 3: r0 = timerfd_create(0x0, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)) timerfd_gettime(r0, &(0x7f00000000c0)) 11:51:05 executing program 3: r0 = timerfd_create(0x0, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)) timerfd_gettime(r0, &(0x7f00000000c0)) 11:51:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 11:51:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/3) 11:51:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/3) 11:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/3) 11:51:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="1ee0eb5426a2f156ae9c55a62c1643e9c9046ff51a47395be2aaa5782caaea510cba6fcd6cd165e4df18ddb9c9ef2b692ab8575d419ee69b0d7c9561494137a27dab8c0415bcb9e4c54ed8f90fd35c0e3ac26b3aa756ae67a2a28be6ddfb4b2d0faca107a10a6d1ad4ca665a33b5e4747635e4ebe1f351c7507135c13a467ee7731c5277daef41f5cb4c080f07d997c7ac9ebee3f724575591af764977494423ed22b9d88d4a5dd4", 0xa8}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x5) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000500), 0x1ff) r3 = memfd_create(&(0x7f0000000740)="7320000000cb0216e186054824ec474ca7d4c8d9b5736d888fc337df3b23a7486fa5f9ecb1b43f6af9a59b1ca6d2ad58f515eae7ec693dc0fd18e116377f1a9b0793ad05f7e9eccc66eb93cc0417d0938b8bba5dc8dab793ed4032d81aa28636ff5a4adc0c7ab9d24a06ce4a", 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="1300ae56c80a70592e63707500", 0x200002, 0x0) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000840)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0xffffffffffffffff) r6 = open(&(0x7f00000006c0)='./bus\x00', 0x501000, 0x41) write$selinux_context(r5, &(0x7f0000000900)='system_u:object_r:tun_tap_device_t:s0\x00', 0xfffffffffffffd8f) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xbdc63db5ebbef633) getegid() mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='fuseblk\x00', 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c626c6bf3697a653d30783030e59d90de1fbc46461be89e49e0894cce30ab30303030013030733f6b5540d0cf70ce3f41e2a1e635003018f2de358d1b3227bf3106a002bd0515da883fe824cb6c1b2628784cf69fe40cd643da44c44f59a2e4591d7f59566232a0f14c1f0a1efd44a1fabecd9a31515142b11a63e02f5dc7359d04c740298409ab2edbfc635bb3c1c629e26bfdf864b7d90532d433ad5fb4c4b1cff16eef2a05525835e18e14c3c2cbabe578dc059f9f362c2b877bb50636134ee0e5bcd18e87362abb0000000000000000000000000000"]) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4364}, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e00)=ANY=[@ANYRES64=r7]) listen(r1, 0x400000000003) renameat(r6, &(0x7f0000000340)='./bus\x00', r5, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x1) r8 = accept4(r0, 0x0, &(0x7f0000000540)=0xffffffffffffff55, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b890805d", 0x36) 11:51:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/3) 11:51:06 executing program 3: prctl$PR_SET_MM_MAP(0x35, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil}, 0x68) 11:51:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x125000, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/input/event#\x00', 0x0) fchdir(r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/67) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x2) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x7, r5}, {0x2, 0x5, r6}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0xdad7bf00a98368dc}, [{}], {0x10, 0x3}, {0x20, 0xa8bd237ff2b3424f}}, 0x4c, 0x2) lseek(r3, 0x0, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000200)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000140)=0x78) mount(&(0x7f00000009c0)=ANY=[@ANYBLOB="c567744aa946bca706be33803ef52cc1016c183f980382f02d1ffb9a0fc0745d14e5138e1bfbef9e7d4b9b495505280771d0214869fb7b333ddba18d00f583686f17d171e3d2e1a3b177ddd55adddd0f5aded7b7386abd36b8faecb42ae0ca6e89242544e45a3cc909d94f1466912cbdffba09be3372bacbfbcb78d80f89136cab542f96a9418445a8"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000440)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000300)) 11:51:06 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1]}, 0x18) connect$inet6(r0, &(0x7f0000000000), 0x1c) 11:51:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000002000000000000000000000000dfffffff000000000000000018000000000000"], 0x0, 0x0, 0x0}) 11:51:06 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) fallocate(r0, 0x3, 0x0, 0xfffe) [ 2047.758530] audit: type=1400 audit(1542801066.903:468): avc: denied { set_context_mgr } for pid=19173 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 2047.784027] binder: 19173:19174 ioctl 40046207 0 returned -13 [ 2047.792365] binder: 19173:19174 transaction failed 29189/-22, size 0-0 line 3014 11:51:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) [ 2047.816644] binder: undelivered TRANSACTION_ERROR: 29189 11:51:07 executing program 5: clone(0x0, &(0x7f0000000580), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) set_tid_address(&(0x7f0000000000)) [ 2048.085298] audit: type=1400 audit(1542801067.233:469): avc: denied { create } for pid=19178 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) 11:51:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) 11:51:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="200028bd7000fedbdf2502000000080002000a000000080000e94e22000008000100579cbeca8c4b623db94a0e35"], 0x1}, 0x1, 0x0, 0x0, 0xa9b0c98816faf2da}, 0x4000) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0400000002000000280000000000000020000000000000001b384224e85e1f1d53a202b31236473035d6043cf09818aa4f18c53675fc0e308b4af9c97ac0b33a520b9c48d29cf0ca3f0309885926f590559ae1162adea08e824450723707eae1a9d821f2ce59ab7bda59f5b471f5d6a2294051bce983e4653c1d1035751c79383746b3983d1828d2215f67d4add319401920a1839e85c9e9d7195e678cd7ac11e60902bb1c61a881f1c18dfc25e3aa0e8a24abbf1635ca0971b1caf33ca8f9a2668bf3aa4010ecc05e690e9e081b29175e4b"], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001080)={0xb, "73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 'syz1\x00', 'syz0\x00', 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "1c50b242cba9"}, 0x11e) write$UHID_DESTROY(r6, &(0x7f0000001280), 0x4) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x211, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind(r0, &(0x7f00000003c0)=@can={0x1d, r3}, 0x80) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0xfffffffffffffffe, 0x0, 0x0) 11:51:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000000)='./control\x00') unlinkat(r0, &(0x7f00000000c0)='./control/file0\x00', 0x0) 11:51:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) 11:51:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) [ 2048.784928] audit: type=1400 audit(1542801067.933:470): avc: denied { create } for pid=19178 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2048.893188] audit: type=1400 audit(1542801068.033:471): avc: denied { create } for pid=19222 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2049.087137] hid-generic 0000:0000:0000.003C: unknown main item tag 0x5 [ 2049.095002] hid-generic 0000:0000:0000.003C: item fetching failed at offset -1287126458 [ 2049.104595] hid-generic: probe of 0000:0000:0000.003C failed with error -22 [ 2049.175759] audit: type=1400 audit(1542801068.323:472): avc: denied { create } for pid=19222 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2049.231073] hid-generic 0000:0000:0000.003D: unknown main item tag 0x5 [ 2049.238331] hid-generic 0000:0000:0000.003D: item fetching failed at offset -1287126986 [ 2049.256021] hid-generic: probe of 0000:0000:0000.003D failed with error -22 11:51:08 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000800120000ffff1500000000000000fd39000000000000000000800100006400e00000010000000010000000000035000000000008000000000000ff0000e80000bb000000000000000003000500000000006700423b1d632b0100200000c128f6d2eb6eddadc1000000000000080000000000000000000000c1928b724689081bdf58a6e159f23613fbab790323184db8c4e66dc0dbaf4a6bf08d97ba2e8e4803e739a1cff451ad7287e9222c69e6aa62cc4b7b85f241d7f4075c96722f1d93180602c63460def03856372d0fa2e8b568c80ae0c1ab781db08e5209f3577dc1d9f88d68db261a68a8432419183c41d786d458d6715f5339"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="200028bd7000fedbdf2502000000080002000a000000080000e94e22000008000100579cbeca8c4b623db94a0e35"], 0x1}, 0x1, 0x0, 0x0, 0xa9b0c98816faf2da}, 0x4000) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0400000002000000280000000000000020000000000000001b384224e85e1f1d53a202b31236473035d6043cf09818aa4f18c53675fc0e308b4af9c97ac0b33a520b9c48d29cf0ca3f0309885926f590559ae1162adea08e824450723707eae1a9d821f2ce59ab7bda59f5b471f5d6a2294051bce983e4653c1d1035751c79383746b3983d1828d2215f67d4add319401920a1839e85c9e9d7195e678cd7ac11e60902bb1c61a881f1c18dfc25e3aa0e8a24abbf1635ca0971b1caf33ca8f9a2668bf3aa4010ecc05e690e9e081b29175e4b"], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001080)={0xb, "73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 'syz1\x00', 'syz0\x00', 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "1c50b242cba9"}, 0x11e) write$UHID_DESTROY(r6, &(0x7f0000001280), 0x4) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x211, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind(r0, &(0x7f00000003c0)=@can={0x1d, r3}, 0x80) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0xfffffffffffffffe, 0x0, 0x0) [ 2049.573819] audit: type=1400 audit(1542801068.713:473): avc: denied { create } for pid=19247 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2049.697101] audit: type=1400 audit(1542801068.843:475): avc: denied { create } for pid=19239 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2049.697111] audit: type=1400 audit(1542801068.843:474): avc: denied { create } for pid=19238 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2049.834667] audit: type=1400 audit(1542801068.973:476): avc: denied { create } for pid=19243 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2049.896367] audit: type=1400 audit(1542801069.043:477): avc: denied { create } for pid=19241 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) [ 2049.994525] hid-generic 0000:0000:0000.003E: unknown main item tag 0x5 [ 2050.001287] hid-generic 0000:0000:0000.003E: item fetching failed at offset -1287124538 [ 2050.017089] hid-generic: probe of 0000:0000:0000.003E failed with error -22 11:51:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:10 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:10 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:11 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000800120000ffff1500000000000000fd39000000000000000000800100006400e00000010000000010000000000035000000000008000000000000ff0000e80000bb000000000000000003000500000000006700423b1d632b0100200000c128f6d2eb6eddadc1000000000000080000000000000000000000c1928b724689081bdf58a6e159f23613fbab790323184db8c4e66dc0dbaf4a6bf08d97ba2e8e4803e739a1cff451ad7287e9222c69e6aa62cc4b7b85f241d7f4075c96722f1d93180602c63460def03856372d0fa2e8b568c80ae0c1ab781db08e5209f3577dc1d9f88d68db261a68a8432419183c41d786d458d6715f5339"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:11 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="200028bd7000fedbdf2502000000080002000a000000080000e94e22000008000100579cbeca8c4b623db94a0e35"], 0x1}, 0x1, 0x0, 0x0, 0xa9b0c98816faf2da}, 0x4000) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0400000002000000280000000000000020000000000000001b384224e85e1f1d53a202b31236473035d6043cf09818aa4f18c53675fc0e308b4af9c97ac0b33a520b9c48d29cf0ca3f0309885926f590559ae1162adea08e824450723707eae1a9d821f2ce59ab7bda59f5b471f5d6a2294051bce983e4653c1d1035751c79383746b3983d1828d2215f67d4add319401920a1839e85c9e9d7195e678cd7ac11e60902bb1c61a881f1c18dfc25e3aa0e8a24abbf1635ca0971b1caf33ca8f9a2668bf3aa4010ecc05e690e9e081b29175e4b"], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001080)={0xb, "73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 'syz1\x00', 'syz0\x00', 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "1c50b242cba9"}, 0x11e) write$UHID_DESTROY(r6, &(0x7f0000001280), 0x4) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x211, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind(r0, &(0x7f00000003c0)=@can={0x1d, r3}, 0x80) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0xfffffffffffffffe, 0x0, 0x0) 11:51:12 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="0007000000000000000047e3553a513c162598fff2bef1d2433e43eb88695a02b58319f37718") getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 11:51:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) r1 = dup(r0) fstat(r1, &(0x7f0000000740)) 11:51:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) r1 = dup(r0) fstat(r1, &(0x7f0000000740)) 11:51:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) r1 = dup(r0) fstat(r1, &(0x7f0000000740)) 11:51:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 11:51:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000240)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) r1 = dup(r0) fstat(r1, &(0x7f0000000740)) 11:51:12 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000162000/0x1000)=nil, 0x1000, 0x4) [ 2053.233562] hid-generic 0000:0000:0000.003F: unknown main item tag 0x5 [ 2053.241357] hid-generic 0000:0000:0000.003F: item fetching failed at offset -1145235506 [ 2053.261235] hid-generic: probe of 0000:0000:0000.003F failed with error -22 [ 2053.382744] audit_printk_skb: 15 callbacks suppressed [ 2053.419832] audit: type=1400 audit(1542801072.523:483): avc: denied { create } for pid=19326 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2053.519169] audit: type=1400 audit(1542801072.663:484): avc: denied { create } for pid=19338 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:13 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 11:51:13 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fac013cb0e5f7b6489485b385afcd7834bffe565a079ab6ee7c13ce907afccfb830225d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24a1e010553741253bffd1bf27ebcefbd6c534c3484e222df0df46b7d6c9f5ccc929e6"], 0x76}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r5, &(0x7f00000004c0)='net/rfcomm\x00') connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x1, 0x5) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r6 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@loopback}}, {{}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000840)=0xc) read$eventfd(r0, &(0x7f0000000180), 0x8) munlockall() 11:51:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff4b) 11:51:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="200028bd7000fedbdf2502000000080002000a000000080000e94e22000008000100579cbeca8c4b623db94a0e35"], 0x1}, 0x1, 0x0, 0x0, 0xa9b0c98816faf2da}, 0x4000) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0400000002000000280000000000000020000000000000001b384224e85e1f1d53a202b31236473035d6043cf09818aa4f18c53675fc0e308b4af9c97ac0b33a520b9c48d29cf0ca3f0309885926f590559ae1162adea08e824450723707eae1a9d821f2ce59ab7bda59f5b471f5d6a2294051bce983e4653c1d1035751c79383746b3983d1828d2215f67d4add319401920a1839e85c9e9d7195e678cd7ac11e60902bb1c61a881f1c18dfc25e3aa0e8a24abbf1635ca0971b1caf33ca8f9a2668bf3aa4010ecc05e690e9e081b29175e4b"], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) write$UHID_CREATE2(r6, &(0x7f0000001080)={0xb, "73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 'syz1\x00', 'syz0\x00', 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "1c50b242cba9"}, 0x11e) write$UHID_DESTROY(r6, &(0x7f0000001280), 0x4) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x211, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind(r0, &(0x7f00000003c0)=@can={0x1d, r3}, 0x80) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0xfffffffffffffffe, 0x0, 0x0) [ 2054.452883] audit: type=1400 audit(1542801073.593:485): avc: denied { create } for pid=19380 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2054.642102] hid-generic 0000:0000:0000.0040: unknown main item tag 0x5 [ 2054.655063] hid-generic 0000:0000:0000.0040: item fetching failed at offset -1145235410 [ 2054.666061] hid-generic: probe of 0000:0000:0000.0040 failed with error -22 11:51:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) sendfile(r5, r1, &(0x7f0000000000)=0x12, 0x100246f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r5, 0x0, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000640)={@dev={0xfe, 0x80, [], 0x11}, 0x5, 0x2, 0x3, 0x2, 0xffffffffffffffe1, 0x8001, 0x100000000}, 0x20) setgroups(0x0, &(0x7f0000000080)) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000006f0000010000000000000000000000000000dfe11b62d198a0d141a724afd70ef110fb279486dcdcb1be03260abab419302d6dc317fab1752bce7eb7cf685d1bdf07c54af95af8f7c0f7b0bb71bc0a6d9335fffe2100000000000000000000000000000000"], 0x69) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0), &(0x7f0000000680)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000780)) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) 11:51:13 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000d85c4a09"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) 11:51:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080), &(0x7f0000000000)=0x4) 11:51:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfe7b, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb}, 0xb) 11:51:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000001a0007031dfffd946fa2830020200a00090000000600004d9b0000000000007e", 0x24}], 0x1}, 0x0) 11:51:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x319, 0x0, 0x0, {}, [@RTA_PREF={0x8}]}, 0x24}}, 0x0) 11:51:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000001a0007031dfffd946fa2830020200a00090000000600004d9b0000000000007e", 0x24}], 0x1}, 0x0) 11:51:14 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() [ 2055.096653] audit: type=1400 audit(1542801074.243:486): avc: denied { create } for pid=19383 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfe7b, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb}, 0xb) [ 2055.158279] audit: type=1400 audit(1542801074.303:487): avc: denied { create } for pid=19409 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfe7b, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb}, 0xb) 11:51:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000001a0007031dfffd946fa2830020200a00090000000600004d9b0000000000007e", 0x24}], 0x1}, 0x0) 11:51:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x22) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x7c}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:51:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfe7b, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb}, 0xb) 11:51:15 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() 11:51:15 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() 11:51:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000001a0007031dfffd946fa2830020200a00090000000600004d9b0000000000007e", 0x24}], 0x1}, 0x0) 11:51:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x28080, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 11:51:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x24, 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x247) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:51:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0xfffffffffffffff0, &(0x7f0000000100)) 11:51:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000140), &(0x7f00000032c0)) 11:51:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0xfe92) 11:51:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000100)="6c6f00966fd651b159a909000000d2980000ff20") 11:51:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000100)="6c6f00966fd651b159a909000000d2980000ff20") 11:51:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = gettid() clone(0x2e828903, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000040)) r3 = dup2(r1, r0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000400)={0x18}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[], 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) tkill(r2, 0x8000000000000014) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)) 11:51:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000100)="6c6f00966fd651b159a909000000d2980000ff20") [ 2056.744050] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured! 11:51:16 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() 11:51:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) 11:51:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000100)="6c6f00966fd651b159a909000000d2980000ff20") 11:51:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x24, 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x247) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:51:16 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() 11:51:16 executing program 4: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000580)) mount(&(0x7f0000000240), &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x14c7e310498837d1, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) 11:51:16 executing program 4: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000580)) mount(&(0x7f0000000240), &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x14c7e310498837d1, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) 11:51:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x24, 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x247) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:51:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x105}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 11:51:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x24, 0x4) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x247) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:51:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:18 executing program 4: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000580)) mount(&(0x7f0000000240), &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x14c7e310498837d1, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) 11:51:18 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() 11:51:18 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab00008257004000000000020000ec125bb000000200"], 0x30) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x1000, 0x0, 0x0, 0x1}) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/selinux/load\x00', 0x0) r2 = syz_open_pts(0xffffffffffffff9c, 0x80000) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000140)={0x5, 0x8001, 0x7fffffff}) 11:51:18 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:18 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b64664e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2a"], 0xa6}}, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000800120000000000000000800100006400e0000001000000001000000000003500000000000476019821aca5e09e35a85c71ac73acd42d23cecfd058057ffea9dbba0f10eaedf39851dc4d0ea0b4635046a7a4a01ca909e6e395895d46df164c8760dee2d2"], 0x69}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x0, 0xc270) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0xffffffffffffffff, 0x0, {0x0, 0x0, 0x8, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(r3, 0x0, 0x1, 0x9) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r7 = request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='ip6gretap0\x00', 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x0, 0x0, r8) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r9, 0x203, &(0x7f0000000740)={&(0x7f0000000600)="8251c7a7acf0cf49358c24a701195bc9ac532f9cb0e3fb9ef847fe67077e6da4ba347332b41d754b9c4dc30251a74c7c", 0x30}) sendmmsg(r0, &(0x7f0000000040), 0x8000000000000d2, 0x0) munlockall() 11:51:18 executing program 4: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f0000000580)) mount(&(0x7f0000000240), &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x14c7e310498837d1, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) 11:51:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/relabel\x00', 0x2, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000840)=""/194, 0xc2}], 0x3) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0xc9e, &(0x7f0000000540)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r3 = dup(r2) recvmsg(r2, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=""/106, 0x6a}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) write$cgroup_pid(r3, &(0x7f0000000500)=r6, 0x12) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r5, &(0x7f0000000080), 0x1c) r7 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@dev, @in6=@remote}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18000020}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000100fe80000000000000000000000000000e080008005101000014000205000000000000000000eeffffffffffff13000200ff02000000000000000000000000000114000200128100000000000000000000000000aa2f00060003000000ffff000002000000090000009b0465415dcaa498f93aa8b8721435187d4c8862de567c9f29"], 0x1}}, 0x0) renameat2(r7, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x2) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, 0xe8) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={r8, @broadcast, @broadcast}, 0xc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) [ 2059.295661] SELinux: ebitmap start bit (131072) is beyond the end of the bitmap (704) [ 2059.357367] tmpfs: No value for mount option '/selinux/relabel' 11:51:18 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='./file0\x00') utime(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) 11:51:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x1}], 0x1, 0x7bf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x40000004}) 11:51:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:18 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='./file0\x00') utime(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) 11:51:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:18 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='./file0\x00') utime(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) 11:51:19 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) mknod(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='./file0\x00') utime(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) 11:51:19 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 2060.174563] tmpfs: No value for mount option '/selinux/relabel' 11:51:19 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:19 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:19 executing program 0: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) write$cgroup_int(r1, &(0x7f0000000440)=0xfff, 0x12) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000003c0)) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x14, 0x48, &(0x7f00000002c0)="5ba2351eda39f3ab2997a4ec9e12111c10660c504ddd0f9cb348df4f1c2e7c4cadc3aa7ede03ea46b174479d45ebd6bfc729493077475bac124d86031fc7b2575677d31ba3676cdf"}) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x51) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x100000000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) 11:51:19 executing program 5: clone(0xfffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) tkill(r0, 0x2) waitid(0x1, r0, &(0x7f0000000040), 0x2, &(0x7f0000000080)) 11:51:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @dev}}, {{0xa, 0x0, @broadcast}}]}, 0x190) 11:51:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000280)="045b8944248f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000000040)="6db86c6f7300", 0x500f, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:51:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:20 executing program 1: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x7fffffffffffffff, 0x6}) 11:51:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x19) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) dup2(r1, r0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) 11:51:20 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:20 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) iopl(0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000600)=""/210, 0xd2, 0x100, 0x0, 0x0) 11:51:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x1) lseek(r1, 0x0, 0x3) 11:51:20 executing program 0: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) write$cgroup_int(r1, &(0x7f0000000440)=0xfff, 0x12) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000003c0)) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x14, 0x48, &(0x7f00000002c0)="5ba2351eda39f3ab2997a4ec9e12111c10660c504ddd0f9cb348df4f1c2e7c4cadc3aa7ede03ea46b174479d45ebd6bfc729493077475bac124d86031fc7b2575677d31ba3676cdf"}) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x51) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x100000000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) 11:51:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x1) lseek(r1, 0x0, 0x3) [ 2061.473029] blk_update_request: 22 callbacks suppressed [ 2061.479031] blk_update_request: I/O error, dev loop0, sector 0 [ 2061.485540] buffer_io_error: 22 callbacks suppressed [ 2061.490647] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 2061.498326] blk_update_request: I/O error, dev loop0, sector 8 [ 2061.504311] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 2061.511975] blk_update_request: I/O error, dev loop0, sector 16 [ 2061.518066] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 2061.525739] blk_update_request: I/O error, dev loop0, sector 24 [ 2061.531797] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 2061.539475] blk_update_request: I/O error, dev loop0, sector 32 [ 2061.545910] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 2061.553720] blk_update_request: I/O error, dev loop0, sector 40 [ 2061.559774] Buffer I/O error on dev loop0, logical block 5, lost async page write 11:51:20 executing program 5: r0 = socket$inet(0x2, 0x4002000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:51:20 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000500)=""/137, 0xfffffce1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11:51:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x1) lseek(r1, 0x0, 0x3) 11:51:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x1) lseek(r1, 0x0, 0x3) [ 2061.567845] blk_update_request: I/O error, dev loop0, sector 48 [ 2061.574048] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 2061.581895] blk_update_request: I/O error, dev loop0, sector 56 [ 2061.588040] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 2061.595735] blk_update_request: I/O error, dev loop0, sector 64 [ 2061.601794] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 2061.609740] blk_update_request: I/O error, dev loop0, sector 72 [ 2061.615872] Buffer I/O error on dev loop0, logical block 9, lost async page write 11:51:20 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) iopl(0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000600)=""/210, 0xd2, 0x100, 0x0, 0x0) 11:51:20 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:21 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) iopl(0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000600)=""/210, 0xd2, 0x100, 0x0, 0x0) 11:51:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/181, 0xb5}], 0x1, &(0x7f0000000780)=""/128, 0x80}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00005c8000)="c3", 0x1, 0x80000000081, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) 11:51:21 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) iopl(0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000600)=""/210, 0xd2, 0x100, 0x0, 0x0) 11:51:21 executing program 2: r0 = epoll_create1(0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1e6a1bff6b68"}, 0x14) fcntl$lock(r0, 0x25, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 11:51:21 executing program 0: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) write$cgroup_int(r1, &(0x7f0000000440)=0xfff, 0x12) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000003c0)) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x14, 0x48, &(0x7f00000002c0)="5ba2351eda39f3ab2997a4ec9e12111c10660c504ddd0f9cb348df4f1c2e7c4cadc3aa7ede03ea46b174479d45ebd6bfc729493077475bac124d86031fc7b2575677d31ba3676cdf"}) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x51) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x100000000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) 11:51:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') flistxattr(r0, &(0x7f0000000040), 0x0) 11:51:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 11:51:22 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x11, 0x803, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 11:51:22 executing program 1: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xffffffffffffffff}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) tkill(r0, 0x5) timer_settime(0x0, 0x0, &(0x7f0000011000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) tkill(r0, 0x12) 11:51:22 executing program 5: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:22 executing program 0: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) write$cgroup_int(r1, &(0x7f0000000440)=0xfff, 0x12) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000003c0)) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x14, 0x48, &(0x7f00000002c0)="5ba2351eda39f3ab2997a4ec9e12111c10660c504ddd0f9cb348df4f1c2e7c4cadc3aa7ede03ea46b174479d45ebd6bfc729493077475bac124d86031fc7b2575677d31ba3676cdf"}) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x51) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x100000000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[]) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) 11:51:22 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:23 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:23 executing program 5: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:23 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 11:51:23 executing program 2: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:24 executing program 3: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:24 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x6}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffb) r5 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000300)={0x1}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) dup2(r3, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) 11:51:24 executing program 2: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:24 executing program 5: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:25 executing program 2: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:25 executing program 5: gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) io_setup(0x45e, &(0x7f00000004c0)) io_submit(0x0, 0x0, &(0x7f0000000680)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/114) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x20}}, 0x0) timer_create(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 11:51:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffe8f, 0x0, &(0x7f0000893ff0), 0x10) shutdown(r0, 0x1) 11:51:26 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c9c380}, &(0x7f00000004c0), 0x0) write(r1, &(0x7f0000000340), 0x10000014c) r2 = epoll_create(0xe29f) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x14}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:51:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 11:51:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 2067.220895] input: syz1 as /devices/virtual/input/input351 11:51:26 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x1f, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x1) 11:51:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) 11:51:26 executing program 4: futex(&(0x7f0000000180), 0xc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0x0) 11:51:26 executing program 4: clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) exit_group(0x0) clone(0x83102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() socket(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) wait4(0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)) [ 2067.502470] input: syz1 as /devices/virtual/input/input352 11:51:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 11:51:26 executing program 4: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) tkill(r0, 0x1000000000016) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() tkill(r2, 0x16) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) 11:51:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400001, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x400100, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000002c0)=""/148) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x8000000001, 0x1, 0xffffffff, 0x1, 0x704c}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000001c0)) r5 = dup(r4) restart_syscall() setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:51:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:51:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080), 0xc) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000016c0)}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000002980), 0x0) listen(r0, 0x7f) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000400)=""/251}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 2067.852454] input: syz1 as /devices/virtual/input/input353 [ 2067.861684] input: syz1 as /devices/virtual/input/input354 11:51:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:51:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 2068.144933] input: syz1 as /devices/virtual/input/input355 11:51:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 2068.208173] input: syz1 as /devices/virtual/input/input356 [ 2068.273059] input: syz1 as /devices/virtual/input/input357 11:51:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) 11:51:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:51:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) 11:51:27 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x3000, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2068.572083] input: syz1 as /devices/virtual/input/input358 11:51:27 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() unshare(0x8020000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) 11:51:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400001, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x400100, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000002c0)=""/148) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x8000000001, 0x1, 0xffffffff, 0x1, 0x704c}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000001c0)) r5 = dup(r4) restart_syscall() setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:27 executing program 1: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000001440)={'system_u:object_r:update_modules_exec_t:s0', 0x20, 'unconfined'}, 0x39) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 11:51:27 executing program 1: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b5254854824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000c7000100070aa8f74104000000", 0x58}], 0x1) 11:51:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000004000), &(0x7f0000001ffc)=0x4) 11:51:27 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev, @random="1b207f5c5eeb", [], {@mpls_uc={0x8864, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @remote, @remote}, @igmp={0x0, 0x0, 0x0, @local}}}}}}, &(0x7f0000000080)) 11:51:28 executing program 1: setitimer(0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x7fff}, 0x0, &(0x7f0000000180)={r1}, 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 11:51:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r1+10000000}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xfffffffffffffffe) ptrace(0x10, r2) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r2) [ 2068.903762] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 11:51:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) 11:51:28 executing program 1: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0xfffffffffffffffc}, 0x2c) [ 2069.343439] vmalloc: allocation failure: 17179869168 bytes [ 2069.350623] syz-executor1: page allocation failure: order:0, mode:0x24000c2 [ 2069.359976] CPU: 0 PID: 20121 Comm: syz-executor1 Not tainted 4.4.164+ #123 [ 2069.367086] 0000000000000000 952bd2ec086fd9b6 ffff8800b532f818 ffffffff81aa5d4d [ 2069.375126] 1ffff10016a65f06 ffff880087092f80 00000000024000c2 0000000000000000 [ 2069.383191] ffffffff828944c0 ffff8800b532f928 ffffffff81487398 ffffffff00000001 [ 2069.391309] Call Trace: [ 2069.393899] [] dump_stack+0xc1/0x124 [ 2069.399258] [] warn_alloc_failed.cold.34+0x33/0x9b [ 2069.405832] [] ? zone_watermark_ok_safe+0x280/0x280 [ 2069.412496] [] ? dump_trace+0x184/0x360 [ 2069.418138] [] ? check_preemption_disabled+0x3b/0x200 [ 2069.424966] [] __vmalloc_node_range+0x360/0x630 [ 2069.431271] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 2069.438115] [] vmalloc+0x5b/0x70 [ 2069.443120] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 2069.449625] [] xt_alloc_entry_offsets+0x41/0x60 [ 2069.455946] [] translate_table+0x2bb/0x1cd0 [ 2069.461902] [] ? trace_hardirqs_on+0x10/0x10 [ 2069.467948] [] ? avc_has_perm_noaudit+0x197/0x2f0 [ 2069.474428] [] ? avc_has_perm_noaudit+0x90/0x2f0 [ 2069.480836] [] ? arpt_do_table+0x16d0/0x16d0 [ 2069.486879] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2069.493618] [] ? __might_fault+0x114/0x1d0 [ 2069.499492] [] ? __check_object_size+0x217/0x327 [ 2069.505888] [] do_replace.isra.7+0x1b1/0x450 [ 2069.511936] [] ? __mutex_unlock_slowpath+0x20a/0x500 [ 2069.518678] [] ? compat_do_replace.isra.6+0x550/0x550 [ 2069.525529] [] ? ns_capable_common+0x12a/0x150 [ 2069.531750] [] do_arpt_set_ctl+0xff/0x140 [ 2069.537535] [] nf_setsockopt+0x6d/0xc0 [ 2069.543061] [] ip_setsockopt+0x88/0xa0 [ 2069.548593] [] tcp_setsockopt+0x88/0xe0 [ 2069.554207] [] sock_common_setsockopt+0x9a/0xe0 [ 2069.560516] [] SyS_setsockopt+0x166/0x260 [ 2069.566303] [] ? SyS_recv+0x40/0x40 [ 2069.571594] [] ? SyS_clock_gettime+0x11e/0x1e0 [ 2069.577823] [] ? SyS_clock_settime+0x210/0x210 [ 2069.584047] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 2069.590570] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2069.600326] Mem-Info: [ 2069.603132] active_anon:112050 inactive_anon:106160 isolated_anon:0 [ 2069.603132] active_file:5538 inactive_file:70567 isolated_file:0 [ 2069.603132] unevictable:0 dirty:143 writeback:0 unstable:0 [ 2069.603132] slab_reclaimable:9144 slab_unreclaimable:69790 [ 2069.603132] mapped:65709 shmem:124567 pagetables:16251 bounce:0 [ 2069.603132] free:1181729 free_pcp:334 free_cma:0 [ 2069.639742] DMA32 free:2166768kB min:4696kB low:5868kB high:7044kB active_anon:205260kB inactive_anon:195208kB active_file:8720kB inactive_file:130092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021792kB mlocked:0kB dirty:256kB writeback:0kB mapped:117904kB shmem:229192kB slab_reclaimable:16900kB slab_unreclaimable:125748kB kernel_stack:12544kB pagetables:28820kB unstable:0kB bounce:0kB free_pcp:812kB local_pcp:132kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 2069.689559] lowmem_reserve[]: 0 3504 3504 [ 2069.695858] Normal free:2560036kB min:5580kB low:6972kB high:8368kB active_anon:243040kB inactive_anon:229432kB active_file:13432kB inactive_file:152176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:316kB writeback:0kB mapped:144932kB shmem:269076kB slab_reclaimable:19676kB slab_unreclaimable:153412kB kernel_stack:14240kB pagetables:36184kB unstable:0kB bounce:0kB free_pcp:504kB local_pcp:284kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 2069.743310] lowmem_reserve[]: 0 0 0 [ 2069.748459] DMA32: 760*4kB (UME) 742*8kB (UME) 508*16kB (UME) 303*32kB (UME) 215*64kB (UME) 53*128kB (UME) 67*256kB (UME) 56*512kB (UME) 41*1024kB (UM) 14*2048kB (U) 489*4096kB (UM) = 2166768kB [ 2069.775192] Normal: 893*4kB (UME) 912*8kB (UME) 468*16kB (UME) 383*32kB (UME) 190*64kB (UME) 93*128kB (UME) 82*256kB (UME) 74*512kB (UM) 39*1024kB (UM) 21*2048kB (UM) 577*4096kB (UM) = 2559892kB [ 2069.801364] 200671 total pagecache pages [ 2069.806110] 0 pages in swap cache [ 2069.809978] Swap cache stats: add 0, delete 0, find 0/0 [ 2069.815946] Free swap = 0kB [ 2069.819439] Total swap = 0kB [ 2069.822813] 1965979 pages RAM [ 2069.826614] 0 pages HighMem/MovableOnly [ 2069.830983] 313340 pages reserved 11:51:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r1+10000000}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xfffffffffffffffe) ptrace(0x10, r2) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r2) 11:51:29 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000500)=""/136) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="f86d3b457f4259e1872218761271b2c99a10c8fb06194e858b969ba8b3e7e89cb8d91044ea151560fbcd633de16210038cadb63e1d5b644deb5ac9c7b559b53ceedd4e1290d18e5cf02a0c5812f4e3e7db00cea90b9fa26958322ffaf8687400d4449021e2f9b55fdf586fea90197287534cc3222f280aaa1642ef8866a7365ba63fd9b5bba17ec2f5c897eb9aaa049d431fa3d05fab1b196a8747f63f97926ce9f40becea743eb3371c16adf22fc49b051bd2512c4bb520c22b9fdad879b2b38836b6be00000000"], &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0xc8e, &(0x7f0000000080)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r3 = dup(r2) recvmsg(r2, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=""/106, 0x6a}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) getsockname$inet(r0, &(0x7f0000000700)={0x2, 0x0, @loopback}, &(0x7f0000000740)=0x10) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$nl_route(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18000020}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000100fe80000000000000000000000000000e080008005101000014000205000000000000000000eeffffffffffff13000200ff02000000000000000000000000000114000200128100000000000000000000000000aa2f00060003000000ffff000002000000090000009b0465415dcaa498f93aa8b8721435187d4c8862de567c9f29"], 0x1}}, 0x0) renameat2(r6, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x2) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, 0xe8) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={r7, @broadcast, @broadcast}, 0xc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) [ 2070.099559] tmpfs: No value for mount option ' [ 2070.099559] ' [ 2070.183606] ip6_tunnel: À xmit: Local address not yet configured! 11:51:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0xce23, @multicast1}, 0x10) 11:51:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400001, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x400100, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000002c0)=""/148) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x8000000001, 0x1, 0xffffffff, 0x1, 0x704c}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000001c0)) r5 = dup(r4) restart_syscall() setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:30 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) 11:51:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r1+10000000}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xfffffffffffffffe) ptrace(0x10, r2) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r2) 11:51:30 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) 11:51:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) 11:51:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x20) 11:51:30 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f00000003c0)=""/178, 0xb2) 11:51:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x4, 0x100, 0x401}, {{}, 0x17, 0x6, 0x7f}, {{}, 0x1f, 0x1, 0x1}, {{0x77359400}, 0x1f, 0x5, 0x5}, {{0x0, 0x7530}, 0x1, 0x100000001}], 0x78) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 11:51:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x4, 0x100, 0x401}, {{}, 0x17, 0x6, 0x7f}, {{}, 0x1f, 0x1, 0x1}, {{0x77359400}, 0x1f, 0x5, 0x5}, {{0x0, 0x7530}, 0x1, 0x100000001}], 0x78) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 11:51:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x4, 0x100, 0x401}, {{}, 0x17, 0x6, 0x7f}, {{}, 0x1f, 0x1, 0x1}, {{0x77359400}, 0x1f, 0x5, 0x5}, {{0x0, 0x7530}, 0x1, 0x100000001}], 0x78) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 11:51:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x4, 0x100, 0x401}, {{}, 0x17, 0x6, 0x7f}, {{}, 0x1f, 0x1, 0x1}, {{0x77359400}, 0x1f, 0x5, 0x5}, {{0x0, 0x7530}, 0x1, 0x100000001}], 0x78) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 11:51:31 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) 11:51:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400001, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x400100, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000002c0)=""/148) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x8000000001, 0x1, 0xffffffff, 0x1, 0x704c}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000001c0)) r5 = dup(r4) restart_syscall() setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) 11:51:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) 11:51:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r1+10000000}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xfffffffffffffffe) ptrace(0x10, r2) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r2) 11:51:31 executing program 5: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000002000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)) getegid() getpid() fstat(0xffffffffffffffff, &(0x7f0000000800)) sendmsg$unix(r2, &(0x7f00000008c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="f8601bec0f0c6aa7cdd3420ea2c9744ab290b69b776ffc01d0d6477f732fb5d3e4111cf1b72c6333da36c87614dc7a2fc389a33a5c90ea6c", 0x38}], 0x1, &(0x7f0000000880)}, 0x20008010) r4 = dup2(r1, r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0x7, 0x0, 0x3, 0x459}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x28) 11:51:31 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) [ 2072.750833] audit: type=1326 audit(1542801091.893:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=20200 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 11:51:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x20000400) dup2(r1, r0) lseek(r0, 0x0, 0x0) 11:51:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0xac98}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x2cd) sendto$inet6(r0, &(0x7f0000000080)="0401000000c000ddb8460900ffb25b4202938207d9fb3780398d5375c5f73f939029298d7535352cd5a1f57590080053c0e385472da722a59a7a033b970720a42f2a2bb404e158ccdb0ac538d24c10d6afcc2f2dbd96", 0x56, 0x0, &(0x7f0000000280)={0xa, 0x200000800, 0x20000000006}, 0x1c) 11:51:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 11:51:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000), 0x4) 11:51:32 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 11:51:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x15, 0x0, 0x0) 11:51:32 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') [ 2073.552613] audit: type=1326 audit(1542801092.693:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=20200 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 11:51:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x15, 0x0, 0x0) 11:51:32 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x1) 11:51:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) 11:51:32 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={0x9, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0xfffffffffffffcd3) r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/45, &(0x7f00000001c0)=0x56b) 11:51:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@srh={0x16, 0x6, 0x4, 0x3, 0x3, 0x38, 0x0, [@mcast1, @dev={0xfe, 0x80, [], 0x13}, @ipv4]}, 0x38) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)) 11:51:32 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 11:51:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) getresuid(&(0x7f00000000c0), 0x0, 0x0) stat(0x0, 0x0) lstat(0x0, 0x0) lstat(0x0, &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000005c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) 11:51:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x15, 0x0, 0x0) 11:51:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) [ 2073.849631] device lo entered promiscuous mode 11:51:33 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 11:51:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x15, 0x0, 0x0) 11:51:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 11:51:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) [ 2074.473360] device lo left promiscuous mode 11:51:33 executing program 5: io_setup(0x8, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) io_getevents(r0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100)={r1}) io_destroy(r0) io_setup(0x7f, &(0x7f0000000180)) 11:51:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) 11:51:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) [ 2074.559770] device lo entered promiscuous mode 11:51:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) 11:51:33 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 11:51:33 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000040)=""/5, 0xfe75) 11:51:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) [ 2074.654213] device lo left promiscuous mode [ 2074.753486] device lo entered promiscuous mode 11:51:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x2000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r1, 0x5421, &(0x7f0000000000)) [ 2074.847236] device lo left promiscuous mode 11:51:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) 11:51:34 executing program 2: clone(0x0, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000240)) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 11:51:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) 11:51:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) 11:51:34 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) [ 2075.461521] device lo entered promiscuous mode 11:51:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) 11:51:34 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) [ 2075.504701] qtaguid: iface_stat: create(lo): no inet dev [ 2075.525060] qtaguid: iface_stat: create6(lo): no inet dev [ 2075.540168] device lo left promiscuous mode [ 2075.641248] device lo entered promiscuous mode 11:51:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) 11:51:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) 11:51:35 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) [ 2075.875889] device lo left promiscuous mode 11:51:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x20000003) 11:51:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 11:51:35 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 11:51:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) 11:51:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) [ 2076.364435] device lo entered promiscuous mode 11:51:35 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) [ 2076.414972] qtaguid: iface_stat: create(lo): no inet dev 11:51:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 11:51:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 2076.477093] qtaguid: iface_stat: create6(lo): no inet dev [ 2076.650350] device lo left promiscuous mode [ 2076.715768] device lo entered promiscuous mode 11:51:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[]) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) 11:51:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:51:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) 11:51:36 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) [ 2076.893343] device lo left promiscuous mode 11:51:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:51:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 11:51:36 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'bond0\x00'}) 11:51:36 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) 11:51:36 executing program 0: seccomp(0x1, 0x5, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 11:51:36 executing program 1: preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000b00)=""/178, &(0x7f0000000a00)=0xb2) fcntl$setownex(r1, 0xf, &(0x7f00000005c0)) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="341a97dc175252a013d88b") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000700)=[{&(0x7f0000000640)="ad77aca68f19d0411836f92d54dfed1a19e60248a64f515b2fe7627df19275ad845777dc0af27998a697151e7e2f9bb50ba137d5e72b99f3a1d3131f98af3b7cd6ee14e7a59c38bb24f92835eb51265d5a895ce5d103eb83b191fa3e04ba8ceb67a7148ed4e1f9e0082644acf708d28d88f8357878bdcfb5bd5479641c5fae8e58382423abbeddf80ffb0634cc2bb2998734e4", 0x93}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, &(0x7f00005c8000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) clock_gettime(0x8000000000000000, &(0x7f0000001240)={0x0, 0x0}) getpid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='erspan0\x00', 0xfffffffffffffc3c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000001280)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)=""/87, 0xffffffffffffff4f}}], 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r5+30000000}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000540)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) 11:51:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x18, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000140)=0x54) 11:51:36 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) [ 2077.842413] device lo entered promiscuous mode [ 2077.974260] qtaguid: iface_stat: create(lo): no inet dev [ 2077.989484] qtaguid: iface_stat: create6(lo): no inet dev 11:51:37 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e21ea1, 0xe6}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:51:37 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="9185a1241cc5fd8545774ceba4b8fa4e867f3b58ab1a09485bb85afcd7830000d71eda000576f9b0ba19ab398b8d71f353b9310d71fcb12a9f88de3b6466ab4d2a774e722b8a24000000003741253b1fd1bf27ebcefbd6c534c3484e222d84df46b7d6c9f5ccc929e6cbcc36bb9e73b24e63b1c15cf07db0729dd2d843863667bf9312c65abd10fabdd99b16124fe0960f00000000000000280000a28c5be0f6e3f7d8f58ae667272f2aa5236497860a15adf1ec8902d59383d0ceb2e4690db75e7965b891a3f5858d104165182a02cab83706b2d2c4195f679b345af2ed6e70faca1f833d6cbcb6deac82c92bcd53e83b539ef1389149993c17e4683a97c91a1fef8bd6de687e9fb660d0b3c5"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) 11:51:37 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) writev(r0, &(0x7f0000000300), 0x10000000000002d6) 11:51:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:37 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000000280)) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)='./file0\x00') 11:51:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) 11:51:37 executing program 1: getitimer(0x0, &(0x7f0000000000)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000500)={0x1000, 0x10001, 0x1, 0x2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc)=0x6, 0x21d) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x5) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000380)) setsockopt$inet_tcp_int(r1, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x8d7) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', r3}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000008c0)='trusted.overlay.opaque\x00', &(0x7f0000000640)='y\x00', 0xfb, 0x1) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) ioctl$TCSBRKP(r4, 0x5425, 0x0) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000000c0)=0x2, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x40, 0x0) r5 = getpid() ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000400)={[], 0x3, 0x1, 0x7, 0x0, 0x6, r5}) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) 11:51:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:37 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000000280)) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)='./file0\x00') 11:51:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) 11:51:37 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000000280)) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)='./file0\x00') 11:51:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:38 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) 11:51:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x84e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x2d2) 11:51:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:38 executing program 5: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000000280)) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)='./file0\x00') 11:51:38 executing program 1: getitimer(0x0, &(0x7f0000000000)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000500)={0x1000, 0x10001, 0x1, 0x2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc)=0x6, 0x21d) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x5) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000380)) setsockopt$inet_tcp_int(r1, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x8d7) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', r3}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000008c0)='trusted.overlay.opaque\x00', &(0x7f0000000640)='y\x00', 0xfb, 0x1) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) ioctl$TCSBRKP(r4, 0x5425, 0x0) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000000c0)=0x2, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x40, 0x0) r5 = getpid() ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000400)={[], 0x3, 0x1, 0x7, 0x0, 0x6, r5}) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) 11:51:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x84e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x2d2) 11:51:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x84e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x2d2) 11:51:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x84e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x2d2) 11:51:38 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000006c0), 0xfffffea1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r3 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0407000000000000"], 0x8) 11:51:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') sendfile(r1, r2, 0x0, 0x8000fffffffe) 11:51:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 11:51:38 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10d}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/keycreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[]}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x0, 0xc270) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x0, 0x1, 0x7fffffff}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[]}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000000c0)={0x7}, 0x1) fstat(0xffffffffffffffff, &(0x7f0000002080)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x8d025, 0x6d0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={@multicast2, @broadcast}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000ec0)={@remote, 0x6a, r8}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001280)='ip6gretap0\x00', 0x10) 11:51:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000074fffc)=0x1, 0xffffffffffffff45) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x80, 0x8}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind$netlink(r3, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfb, 0xfffffffffffffffc}, 0xc) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:38 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000001d0007031dfffd946fa2830020200a0009000300ff1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 11:51:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000004c000)=0x27, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) 11:51:38 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) times(&(0x7f0000000040)) [ 2079.658419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 2079.695172] audit: type=1400 audit(1542801098.833:490): avc: denied { create } for pid=20613 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 2079.794542] audit: type=1400 audit(1542801098.943:491): avc: denied { create } for pid=20613 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:51:39 executing program 1: getitimer(0x0, &(0x7f0000000000)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000500)={0x1000, 0x10001, 0x1, 0x2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc)=0x6, 0x21d) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x5) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000380)) setsockopt$inet_tcp_int(r1, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x8d7) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', r3}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000008c0)='trusted.overlay.opaque\x00', &(0x7f0000000640)='y\x00', 0xfb, 0x1) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) ioctl$TCSBRKP(r4, 0x5425, 0x0) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000000c0)=0x2, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x40, 0x0) r5 = getpid() ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000400)={[], 0x3, 0x1, 0x7, 0x0, 0x6, r5}) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) 11:51:39 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 11:51:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000580)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e682308000000c03a9c631064eea98b4363ad899c6bdec5e9aa9bc314d2d1791f9e8536dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce28ab4eaec9bdd36740e127730e90f2cd72b828b8d9a3c470f45c3e411155998da386b71d877ad3c4df132f9759798b7b1d668d2f90d33cf818a488cf0438b4befaa5b7d6a526293b1b72d261f28ba715be95eb1b42ac6f7950bb1cb9532de06f4bac003b538a01d2ca3c04af049a9d84a5944a3e46c556c6fa8e0be1820360f8caf4890d5e5a343491ebf424f31dd5bdb65a5ad8fd530d98062f9a256dcfab2075a64677deb43f0dbd4bfbf213b3fa00aa50c9747f27ba12", 0x0) pwrite64(r1, &(0x7f0000000000)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') 11:51:39 executing program 3: clone(0x1000000000011, &(0x7f0000003980), &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000280)) waitid(0x0, 0x0, &(0x7f0000000400), 0x1000004, &(0x7f0000000440)) 11:51:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000074fffc)=0x1, 0xffffffffffffff45) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x80, 0x8}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind$netlink(r3, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfb, 0xfffffffffffffffc}, 0xc) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:39 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_access(r0, &(0x7f0000000280)={'system_u:object_r:unconfined_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xffffffffffff7fff}, 0x5a) 11:51:39 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_access(r0, &(0x7f0000000280)={'system_u:object_r:unconfined_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xffffffffffff7fff}, 0x5a) [ 2079.968592] SELinux: Invalid class 32767 [ 2079.974991] SELinux: Invalid class 32767 [ 2080.020308] SELinux: Invalid class 32767 [ 2080.055934] audit: type=1400 audit(1542801099.203:492): avc: denied { create } for pid=20654 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:51:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000004100), 0x2a37, 0x0, 0x0) 11:51:39 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_access(r0, &(0x7f0000000280)={'system_u:object_r:unconfined_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xffffffffffff7fff}, 0x5a) 11:51:39 executing program 4: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$selinux_access(r0, &(0x7f0000000280)={'system_u:object_r:unconfined_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xffffffffffff7fff}, 0x5a) 11:51:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x10}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) [ 2080.357548] SELinux: Invalid class 32767 11:51:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000000)='./file0\x00') [ 2080.392581] SELinux: Invalid class 32767 11:51:39 executing program 1: getitimer(0x0, &(0x7f0000000000)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000500)={0x1000, 0x10001, 0x1, 0x2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc)=0x6, 0x21d) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x5) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000380)) setsockopt$inet_tcp_int(r1, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x1) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x8d7) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', r3}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000008c0)='trusted.overlay.opaque\x00', &(0x7f0000000640)='y\x00', 0xfb, 0x1) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) ioctl$TCSBRKP(r4, 0x5425, 0x0) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000000c0)=0x2, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x40, 0x0) r5 = getpid() ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000400)={[], 0x3, 0x1, 0x7, 0x0, 0x6, r5}) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$packet(0x11, 0x0, 0x300) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) 11:51:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000074fffc)=0x1, 0xffffffffffffff45) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x80, 0x8}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind$netlink(r3, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfb, 0xfffffffffffffffc}, 0xc) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 11:51:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000000)='./file0\x00') 11:51:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 11:51:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000004100), 0x2a37, 0x0, 0x0) 11:51:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000000)='./file0\x00') 11:51:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f0000000000)='./file0\x00') 11:51:39 executing program 4: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) [ 2080.805938] audit: type=1400 audit(1542801099.953:493): avc: denied { create } for pid=20685 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:51:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)="010000000000", 0xfffffe8b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:51:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x902) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) 11:51:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) read(r2, &(0x7f0000000140)=""/125, 0x7d) r3 = syz_open_pts(r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) dup3(r3, r2, 0x0) tkill(r1, 0x1000000000016) 11:51:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f000074fffc)=0x1, 0xffffffffffffff45) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x60000008000006, &(0x7f00007b1000)=0x81, 0x4) sendto$inet6(r0, &(0x7f0000000240)="8e0bff2d860dcc93b2641c5013897ab174d9dffc06caa520f3", 0x19, 0x400c001, &(0x7f0000000280)={0xa, 0x4e21, 0x4d9f, @dev={0xfe, 0x80, [], 0x12}, 0x9}, 0x1c) rt_sigtimedwait(&(0x7f0000000140)={0x9}, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x80, 0x8}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) pivot_root(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='./bus\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind$netlink(r3, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfb, 0xfffffffffffffffc}, 0xc) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 11:51:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000004100), 0x2a37, 0x0, 0x0) 11:51:40 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240), 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfffffd87) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) fstat(0xffffffffffffffff, &(0x7f0000000440)) [ 2081.681740] audit: type=1400 audit(1542801100.823:494): avc: denied { create } for pid=20729 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:51:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)="010000000000", 0xfffffe8b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:51:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x902) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) 11:51:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240), 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfffffd87) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) fstat(0xffffffffffffffff, &(0x7f0000000440)) 11:51:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240), 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfffffd87) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) fstat(0xffffffffffffffff, &(0x7f0000000440)) 11:51:42 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x902) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) 11:51:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240), 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfffffd87) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) fstat(0xffffffffffffffff, &(0x7f0000000440)) 11:51:42 executing program 5: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @remote}, 0x10) close(r0) 11:51:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r0, &(0x7f0000004100), 0x2a37, 0x0, 0x0) 11:51:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)="010000000000", 0xfffffe8b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:51:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) poll(&(0x7f0000000240)=[{r0, 0x8000}, {r0, 0x8000}, {r0, 0x1000}, {r0, 0x4400}, {0xffffffffffffffff, 0x2000}], 0x5, 0xe) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc0000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 11:51:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x902) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) 11:51:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10000000000013, &(0x7f0000534000), &(0x7f0000000040)=0x4) 11:51:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) poll(&(0x7f0000000240)=[{r0, 0x8000}, {r0, 0x8000}, {r0, 0x1000}, {r0, 0x4400}, {0xffffffffffffffff, 0x2000}], 0x5, 0xe) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc0000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 11:51:44 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x8000, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @dev, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'rose0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/12, 0xc}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/63, 0x3f}], 0x3, &(0x7f0000000900)=""/1, 0x1, 0x1000}, 0x80000001}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/179, 0xb3}, {&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/144, 0x90}, {&(0x7f0000000c40)}], 0x4, &(0x7f0000000cc0)=""/197, 0xc5, 0x6}}, {{&(0x7f0000000dc0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e40)=""/116, 0x74}, {&(0x7f0000000ec0)=""/191, 0xbf}], 0x2, &(0x7f0000001080)=""/223, 0xdf, 0x8dcf}}], 0x3, 0x40000001, &(0x7f0000001240)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'ip6gre0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001640)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000001740)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000001780)={@remote, 0x0}, &(0x7f00000017c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001900)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1f0, r2, 0x820, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xab04}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5c1}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r12 = getpid() rt_tgsigqueueinfo(r12, r12, 0x16, &(0x7f0000000100)) ptrace(0x10, r12) r13 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x240) sendfile(r13, r13, &(0x7f00000001c0), 0x6) ioctl$BLKIOMIN(r13, 0x1278, &(0x7f0000000140)) ptrace(0xffffffffffffffff, r12) 11:51:44 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1, &(0x7f0000000a00)=""/3, 0x3}, 0xacbdbebfad933dbd) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)="010000000000", 0xfffffe8b) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast2, @dev, @mcast1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 2085.169724] audit_printk_skb: 12 callbacks suppressed 11:51:44 executing program 4: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) 11:51:44 executing program 5: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:44 executing program 4: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) 11:51:44 executing program 4: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) [ 2085.336745] audit: type=1400 audit(1542801104.313:499): avc: denied { create } for pid=20836 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:44 executing program 4: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) 11:51:44 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) open(0x0, 0x0, 0x143) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11:51:44 executing program 3: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) 11:51:44 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) open(0x0, 0x0, 0x143) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11:51:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) poll(&(0x7f0000000240)=[{r0, 0x8000}, {r0, 0x8000}, {r0, 0x1000}, {r0, 0x4400}, {0xffffffffffffffff, 0x2000}], 0x5, 0xe) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc0000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 2085.824635] audit: type=1400 audit(1542801104.973:500): avc: denied { create } for pid=20861 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2085.844571] audit: type=1400 audit(1542801104.973:501): avc: denied { create } for pid=20848 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:45 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) open(0x0, 0x0, 0x143) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11:51:45 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f00000002c0), 0x8) dup3(r1, r0, 0x0) 11:51:45 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) open(0x0, 0x0, 0x143) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11:51:45 executing program 5: socketpair(0x0, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB]) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x17, 0x0, &(0x7f0000000340)}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000440)) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e0", 0x24}], 0x1) open(&(0x7f0000000400)='./bus\x00', 0x20000, 0x98) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x2) 11:51:45 executing program 4: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000100)='gid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 11:51:45 executing program 3: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) [ 2086.564854] audit: type=1400 audit(1542801105.703:502): avc: denied { create } for pid=20903 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) poll(&(0x7f0000000240)=[{r0, 0x8000}, {r0, 0x8000}, {r0, 0x1000}, {r0, 0x4400}, {0xffffffffffffffff, 0x2000}], 0x5, 0xe) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc0000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 2086.769489] audit: type=1400 audit(1542801105.913:503): avc: denied { create } for pid=20915 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:46 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 11:51:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 11:51:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) epoll_create1(0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000780)={0x14, 0x49, 0x1, {0xa1, 0x0, 0x3}}, 0x14) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x80) clone(0x8860000, &(0x7f0000000140), 0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000680)={0xa, 0x5, 0x1, 0x10001}, 0xa) r4 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x40000000141042, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x80, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) shutdown(r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept(r0, &(0x7f0000000700)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000600)=0x80) [ 2087.337990] audit: type=1400 audit(1542801106.483:504): avc: denied { create } for pid=20941 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:46 executing program 4: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000100)='gid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 11:51:46 executing program 3: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) 11:51:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 11:51:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 11:51:46 executing program 5: clone(0x2300001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) rt_sigreturn() 11:51:46 executing program 5: clone(0x2300001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) rt_sigreturn() [ 2087.812365] audit: type=1400 audit(1542801106.953:505): avc: denied { create } for pid=20941 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 11:51:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) epoll_create1(0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000780)={0x14, 0x49, 0x1, {0xa1, 0x0, 0x3}}, 0x14) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x80) clone(0x8860000, &(0x7f0000000140), 0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000680)={0xa, 0x5, 0x1, 0x10001}, 0xa) r4 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x40000000141042, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x80, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) shutdown(r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept(r0, &(0x7f0000000700)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000600)=0x80) 11:51:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) [ 2088.064790] audit: type=1400 audit(1542801107.213:506): avc: denied { create } for pid=20992 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:47 executing program 4: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000100)='gid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 11:51:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 11:51:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000)='w', 0x1, 0x8001, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1ffc}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b9", 0x1, 0xa7867807938aca30, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 11:51:47 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='ip6tnl0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) listen(r0, 0x0) 11:51:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000000200), 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) 11:51:47 executing program 3: munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000007) 11:51:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="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", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:51:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r2, &(0x7f0000007e00), 0x4000000000000f4, 0xe0ff) 11:51:56 executing program 5: clone(0x2300001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) rt_sigreturn() 11:51:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000100), 0x4) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x0) 11:51:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}]}, 0x20}}, 0x0) 11:51:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) epoll_create1(0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000780)={0x14, 0x49, 0x1, {0xa1, 0x0, 0x3}}, 0x14) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x80) clone(0x8860000, &(0x7f0000000140), 0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000680)={0xa, 0x5, 0x1, 0x10001}, 0xa) r4 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="030000000000000008001b0000000000842a9ba6e22361937506a7c45d2145155a4344a8eb2900ff5ecff333a2d187ed9304884383d102ffff00009b4795bcf8aa19467f94c0002cea5069c6c6c7da7856bd21bbe73525c4342732d385eba8c106432dcb0a5f10b670554fa6440a54c35f1d717acad981ca578b48643777d54f7715aaeed63d9e9ab74fa0cb90ae08a2b99debf435430457760f5b1f50166517aee8fd4251f8c0f3b1c290104dfd892993501bbd8592fb2bcd59623bcebe2c8ce05d2a06cb38f58522cf5449cd1b4c61be22f3a75b42fbc4e62f657724bfdba33263bb9fb7256af7867170129e1b9c82012cf925f65e67e2e5b6b4d4ec59382c1fe53578996055ca0ad606d01afb4f5f00132cfb68ac0ed8ac57f66eedf97f83b0a107bcaf2dce7edee4db16ab25fcca86475f2a452c470e34ac58d6f96fc2fca8c7339f154c40e02542c5192a72b8d1c825f3d93241769b0be5f1c4adf2ae43f2691362227d997f70bf12a1a4892436cf52e4f9ff6d45ae584e2bc3f76743594e57e4120790770fa293bc1c3dd716f38cdd7eb9f0752e375daba2694862dcacebd4ff6bf0aca4aa42a301b37c0c465c1fff07e9036bb9133870530276680ec1da001d561ac15b5a679b842888a1da98ddc163e1d73c35556363de6600f3c0a24e1fa15fe22e26c50b4174f41a7401dea1930e4bfef4ccd87fbe1ecd5403b00562154991717844c2fedc2dcfc9694ff6aeb66f0a5040b60e6ed2d2757f2682"], 0x1}}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x40000000141042, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x80, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) shutdown(r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept(r0, &(0x7f0000000700)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000600)=0x80) 11:51:56 executing program 4: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000100)='gid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 11:51:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="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", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:51:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="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", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 2097.114364] audit: type=1400 audit(1542801116.253:507): avc: denied { create } for pid=21064 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:51:56 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000019000)) 11:51:56 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 11:51:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="502da63121ba2b4549143617a27d02d65601000000b4c32aae973bdac52a7944158eb03d63e0143c52b8e5496a3b221f81ec0d2523eb0bcc5276ed1297ed6bb026dd90038eee11f6ad9ae37dd4c152752cb7396e382ff05653814afb96a19a6a416d63a1ec345e502a8c94bd1947cd64a010ac6c06a59909dd8b509f157e79713f120815e88e5f9ba5a4fadff9b9045f2468b09c6768a858ea33b189322e28807f2a041758874ef2dffceacae6ca389033dff94f40cc6c7cec12dda683c8d164aff2272c91f4c2e120352a8e030029b05c4d11514dae7f4da065a67994537d914b2874a82c9cfee6bb9a4a279edee601986427e12399b67d618d9d39bca00711e657fcf1681723cf3b2b8fb2052e10875b298a67ff641cab376a0ca6e5cb2fb5e2427598de34885b63acba9bd99b9391f4aca0e61c9b33accaef35768fcbec34d7251f351dad94c918500dc70585c30d7a", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:51:56 executing program 1: clone(0x4008500, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') exit(0x0) fstat(r0, &(0x7f0000000600)) 11:51:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) epoll_create1(0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000780)={0x14, 0x49, 0x1, {0xa1, 0x0, 0x3}}, 0x14) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x80) clone(0x8860000, &(0x7f0000000140), 0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000680)={0xa, 0x5, 0x1, 0x10001}, 0xa) r4 = fcntl$dupfd(r1, 0x0, r1) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000180)=0x6e, 0x80800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x40000000141042, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x80, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) shutdown(r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept(r0, &(0x7f0000000700)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000600)=0x80) [ 2097.503220] audit: type=1400 audit(1542801116.643:508): avc: denied { create } for pid=21089 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:52:02 executing program 5: clone(0x2300001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) rt_sigreturn() 11:52:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="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", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:52:02 executing program 1: clone(0x4008500, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') exit(0x0) fstat(r0, &(0x7f0000000600)) 11:52:02 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280), 0x8) rt_sigaction(0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 11:52:02 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x800000006, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0x0) 11:52:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="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", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:52:02 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) io_submit(0x0, 0xbf0ea082bbb9b4d6, 0xfffffffffffffffe) 11:52:02 executing program 1: clone(0x4008500, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') exit(0x0) fstat(r0, &(0x7f0000000600)) 11:52:02 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fallocate(r1, 0x0, 0x0, 0x8000) lseek(r1, 0x0, 0x4) 11:52:02 executing program 1: clone(0x4008500, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') exit(0x0) fstat(r0, &(0x7f0000000600)) 11:52:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f000059dffc), &(0x7f0000000200)=0x4) 11:52:02 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x316}, 0x3a) 11:52:16 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000015c0), &(0x7f00000000c0)=0x4) 11:52:16 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000002c0)="2954f545219968caada9babc4c4b1d04e004d1585379f928fe1801fa4605bb9a8c6a2752232c519e451b349eced6e7dd46c981fbdb403dbbf705c95e54618cea9aa57f6cd40565ecb33e53feefd850726d206715e15038e62780d53ace5dc14a252e994f42bb8518b2e7181b1cc542d46653fd0e8abe07b34b") ptrace$cont(0x1f, r1, 0x0, 0x0) 11:52:16 executing program 0: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) ioctl$TIOCNOTTY(r1, 0x5422) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380), 0x3cc) 11:52:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)="2e2f6367726f7a31005d37b5c0a0716aacd9752724bd8ddee864d3b0ace36a1a21195c18aef86e89a1b8b4a9dc79d5e2d906468b0ddc3521a78616d9d0b6e0457a0ea1143ac8497e1e8cc4543dcc39ecc66bdd6c7a0d18c4ebbf1d9d3f29ba0f96fd26afd586b4b486763198ef13b561753e733552f4d83d6a6c4a0d84401e520ee3006c3d268e483ab268c58e4c954fc04cd754f0563c62de11fbcd97d9c9e44e550dd24f19e9960d38a2797252bdb9158ac43bf7dd6d2c812e3200811c9e6856b5487119a01652d5d0f35d6ef560ff681ae6ff8f62fdcfa313e75d29412e6412c74d112920", 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$unix(0x1, 0x100000000000007, 0x0) listen(r1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r4 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) sendto$inet6(r3, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) r5 = geteuid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r4, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x400, {0x40, 0x1, 0x6}, 0x50, r5, r6, 0x31e, 0x6, 0xd632, 0x7fffffff, 0x79, 0xb7f1, 0x7fff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x2, 0x5, 0x800}}, 0xa0) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x842400) r8 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0x10) write$selinux_context(r8, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) creat(&(0x7f0000000400)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) getsockopt$sock_buf(r7, 0x1, 0xbf, &(0x7f0000000900)=""/222, &(0x7f00000000c0)=0xde) write(r3, &(0x7f0000000780)="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", 0x151) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0xffffffa0) r9 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 11:52:16 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rmdir(&(0x7f0000000040)='./file0/bus\x00') 11:52:16 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, 0x0) 11:52:17 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000356ffc)=0xffffffffffffff43, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x7}, 0x10) 11:52:17 executing program 1: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 11:52:17 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 11:52:17 executing program 0: r0 = epoll_create(0x1) r1 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 11:52:17 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rmdir(&(0x7f0000000040)='./file0/bus\x00') [ 2118.028473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket [ 2118.042960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 11:52:17 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f00000067c0)="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", 0xc01}], 0x1, &(0x7f0000007980)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3c9, &(0x7f0000003140)}}, {{&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000007380), 0x0, &(0x7f00000073c0), 0x346}}], 0x2, 0x0) 11:52:19 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:19 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rmdir(&(0x7f0000000040)='./file0/bus\x00') 11:52:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f00000067c0)="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", 0xc01}], 0x1, &(0x7f0000007980)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3c9, &(0x7f0000003140)}}, {{&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000007380), 0x0, &(0x7f00000073c0), 0x346}}], 0x2, 0x0) 11:52:19 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:19 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 11:52:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f00000067c0)="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", 0xc01}], 0x1, &(0x7f0000007980)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3c9, &(0x7f0000003140)}}, {{&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000007380), 0x0, &(0x7f00000073c0), 0x346}}], 0x2, 0x0) 11:52:20 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rmdir(&(0x7f0000000040)='./file0/bus\x00') 11:52:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f00000078c0)=[{&(0x7f00000067c0)="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", 0xc01}], 0x1, &(0x7f0000007980)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x3c9, &(0x7f0000003140)}}, {{&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000007380), 0x0, &(0x7f00000073c0), 0x346}}], 0x2, 0x0) 11:52:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:20 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:20 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000000)=@ethtool_eee={0x45}}) 11:52:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x2801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 11:52:20 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:20 executing program 4: memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000500)=@filename='./file1\x00', &(0x7f0000000540)='.\x00', &(0x7f0000000580)='squashfs\x00', 0x0, &(0x7f00000005c0)='system.posix_acl_access\x00') 11:52:20 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 11:52:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) symlink(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file1\x00') quotactl(0x2080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)) 11:52:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x2801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 11:52:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:22 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 11:52:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0xfdaf}}, 0x0) 11:52:22 executing program 4: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x10000000000007, 0x0, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:52:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f0000000300)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x1025, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getdents(r0, &(0x7f00000005c0)=""/4096, 0x1000) 11:52:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f0000000300)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x1025, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getdents(r0, &(0x7f00000005c0)=""/4096, 0x1000) 11:52:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f0000000300)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x1025, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getdents(r0, &(0x7f00000005c0)=""/4096, 0x1000) 11:52:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f0000000300)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x1025, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getdents(r0, &(0x7f00000005c0)=""/4096, 0x1000) 11:52:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x20011, r0, 0x0) [ 2123.306331] binder: binder_mmap: 21400 20001000-20004000 bad vm_flags failed -1 11:52:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) r2 = eventfd2(0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000d4a000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000fe0ff4)) 11:52:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x2801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 11:52:23 executing program 3: eventfd2(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 11:52:23 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="f1cec3281d34", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280)) 11:52:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) open(&(0x7f0000000540)='./file0\x00', 0x44400, 0x1a1) r1 = dup2(r0, 0xffffffffffffff9c) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x40, 0x3}) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000005c0)={0x3, 0x8001, 0x5, 0x6, 0x400, 0xffffffffd4d10055}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000680)=0xe8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 11:52:23 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f000000eff4)) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) close(r3) shutdown(r1, 0x1) 11:52:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x22e39d74f374a10, 0x200096cc) [ 2124.752934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 11:52:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x22e39d74f374a10, 0x200096cc) 11:52:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000001600)='oom_adj\x00') write$cgroup_int(r1, &(0x7f0000000080)=0xfffffffffffffffb, 0x3) 11:52:24 executing program 1: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="e04a4f74b80de1fa", 0x8}], 0x1) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="5565759488b04392", 0x8}], 0x1) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 11:52:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001580)="ea", 0x1}], 0x1, &(0x7f0000002780)=[{0x10, 0x29}], 0x10}}], 0x1, 0x90) 11:52:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x22e39d74f374a10, 0x200096cc) 11:52:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x891a, &(0x7f0000000000)="0a5cc80700315f85715070") sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b40}]}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'rose0\x00', {0x2, 0x4e24}}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x80, 0x0) accept4$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x10, 0x80800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x2801}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 11:52:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r2, 0x1000000000016) 11:52:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000000}, 0xc) bind$netlink(r0, &(0x7f0000000100), 0xc) 11:52:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40200000000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={"65716c000000a95b00", @ifru_flags=0x2}) 11:52:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x22e39d74f374a10, 0x200096cc) 11:52:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 2127.655124] binder: 21495:21497 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2127.687620] : renamed from eql [ 2127.698248] binder: 21495:21497 unknown command 14 [ 2127.715629] binder: 21495:21497 ioctl c0306201 20000040 returned -22 [ 2127.727414] binder: 21495:21497 unknown command 0 [ 2127.733221] binder: 21495:21497 ioctl c0306201 2000dfd0 returned -22 11:52:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x891a, &(0x7f0000000000)="0a5cc80700315f85715070") sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b40}]}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'rose0\x00', {0x2, 0x4e24}}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x80, 0x0) accept4$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x10, 0x80800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:27 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 11:52:27 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 11:52:27 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 11:52:27 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) 11:52:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = dup2(r0, r0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) 11:52:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = dup2(r0, r0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) 11:52:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r2, 0x1000000000016) 11:52:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40200000000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={"65716c000000a95b00", @ifru_flags=0x2}) 11:52:27 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000033f, 0x0) 11:52:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 11:52:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x891a, &(0x7f0000000000)="0a5cc80700315f85715070") sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b40}]}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'rose0\x00', {0x2, 0x4e24}}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x80, 0x0) accept4$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x10, 0x80800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = dup2(r0, r0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) 11:52:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = dup2(r0, r0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) 11:52:27 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000033f, 0x0) 11:52:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 2128.615140] binder: 21550:21551 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2128.637289] binder: 21550:21551 unknown command 14 [ 2128.646615] binder: 21550:21551 ioctl c0306201 20000040 returned -22 [ 2128.666221] binder: 21550:21551 unknown command 0 [ 2128.671344] binder: 21550:21551 ioctl c0306201 2000dfd0 returned -22 [ 2128.685069] : renamed from eql [ 2128.700051] binder: 21534:21555 unknown command 14 [ 2128.700193] binder: 21534:21541 Acquire 1 refcount change on invalid ref 0 ret -22 11:52:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 2128.715782] binder: 21534:21555 ioctl c0306201 20000040 returned -22 [ 2128.747850] binder: 21534:21541 unknown command 0 INIT: Id "6" respawning too fast: disabled for 5 minutes [ 2128.810923] binder: 21560:21561 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2128.821763] binder: 21560:21561 unknown command 14 [ 2128.826957] binder: 21560:21561 ioctl c0306201 20000040 returned -22 INIT: Id "3" respawnin[ 2128.841507] binder: 21560:21561 unknown command 0 g too fast: disa[ 2128.848905] binder: 21560:21561 ioctl c0306201 2000dfd0 returned -22 bled for 5 minutes 11:52:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') INIT: Id "5" respawning too fast: disabled for 5 minutes 11:52:28 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000033f, 0x0) INIT: Id "2" respawning too fast: disa[ 2128.912397] binder: 21565:21567 Acquire 1 refcount change on invalid ref 0 ret -22 bled for 5 minut[ 2128.914754] binder: 21534:21541 ioctl c0306201 2000dfd0 returned -22 es INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes [ 2128.960182] binder: 21565:21567 unknown command 14 [ 2128.966568] binder: 21565:21567 ioctl c0306201 20000040 returned -22 [ 2128.977629] binder: 21565:21567 unknown command 0 [ 2128.983711] binder: 21565:21567 ioctl c0306201 2000dfd0 returned -22 11:52:28 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x8001, 0x0, 0x2}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 11:52:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r2, 0x1000000000016) 11:52:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40200000000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={"65716c000000a95b00", @ifru_flags=0x2}) 11:52:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 11:52:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x891a, &(0x7f0000000000)="0a5cc80700315f85715070") sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b40}]}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'rose0\x00', {0x2, 0x4e24}}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x80, 0x0) accept4$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x10, 0x80800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:28 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000033f, 0x0) [ 2129.309216] binder: 21578:21585 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2129.325113] binder: 21578:21585 unknown command 14 [ 2129.331305] binder: 21578:21585 ioctl c0306201 20000040 returned -22 [ 2129.397879] binder: 21578:21588 unknown command 0 11:52:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='E'], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x2, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2d0, &(0x7f0000000100), 0xffffffffffffe36, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 2129.466371] binder: 21578:21588 ioctl c0306201 2000dfd0 returned -22 11:52:28 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x8001, 0x0, 0x2}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 11:52:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40200000000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={"65716c000000a95b00", @ifru_flags=0x2}) 11:52:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r3, 0x1000000000016) 11:52:28 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x8001, 0x0, 0x2}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 11:52:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f96be4ec9254b2e07a7af828a798058439ed54ffa07424ada75af1f02acc7ed005a83") fsetxattr(r0, &(0x7f0000000000)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000040)='ppp1cpusetem1)\x00', 0xf, 0x0) [ 2129.849231] binder: 21603:21607 Acquire 1 refcount change on invalid ref 0 ret -22 11:52:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f96be4ec9254b2e07a7af828a798058439ed54ffa07424ada75af1f02acc7ed005a83") fsetxattr(r0, &(0x7f0000000000)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000040)='ppp1cpusetem1)\x00', 0xf, 0x0) [ 2129.942187] : renamed from eql [ 2130.001151] binder: 21603:21607 unknown command 14 [ 2130.007008] binder: 21603:21607 ioctl c0306201 20000040 returned -22 [ 2130.025854] binder: 21603:21607 unknown command 0 [ 2130.030701] binder: 21603:21607 ioctl c0306201 2000dfd0 returned -22 11:52:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r2, 0x1000000000016) 11:52:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f96be4ec9254b2e07a7af828a798058439ed54ffa07424ada75af1f02acc7ed005a83") fsetxattr(r0, &(0x7f0000000000)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000040)='ppp1cpusetem1)\x00', 0xf, 0x0) 11:52:29 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @mcast1, 0xffe0000000000}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000640)=ANY=[], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @mcast2, 0x10000}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000003c0)={0x8, 0x800, 0x1}) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x8001, 0x0, 0x2}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000180), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x7, 0x4) 11:52:29 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xa) 11:52:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 11:52:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f96be4ec9254b2e07a7af828a798058439ed54ffa07424ada75af1f02acc7ed005a83") fsetxattr(r0, &(0x7f0000000000)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000040)='ppp1cpusetem1)\x00', 0xf, 0x0) 11:52:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900ff0000000a0000009c570000fe8000000000000000000000000000ff000000000000000002000100000000000000050c0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) 11:52:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/183, 0xb7}], 0x2, 0x0) 11:52:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r3, 0x1000000000016) 11:52:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 11:52:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x0, 0x0, 0xd4}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)) ptrace$cont(0x1f, r1, 0x0, 0x0) 11:52:30 executing program 4: r0 = socket(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) listen(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 11:52:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2000000000007, &(0x7f0000000200), 0x4) sendmmsg$unix(r0, &(0x7f00000009c0), 0x49249249249262d, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xa) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f0000000240)}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 11:52:30 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={0x4}, 0x8, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r6, 0x30, &(0x7f0000000340)={0x2c, 0x1, 0x0, 0xccab}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, &(0x7f0000000000), 0x80003) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000180)=0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getpeername$packet(0xffffffffffffffff, &(0x7f00000043c0), &(0x7f00000000c0)=0x14) 11:52:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 11:52:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 11:52:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 11:52:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000680), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@remote}, {}, {}, 0x0, 0x0, 0x9effffff}}}, 0xc0}}, 0x0) 11:52:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r3, 0x1000000000016) 11:52:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 11:52:30 executing program 0: r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x2c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2a) write$selinux_access(r1, &(0x7f0000000480)={'system_u:object_r:usbmon_device_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) write$P9_RXATTRWALK(r1, &(0x7f0000000440)={0xf}, 0xf) creat(&(0x7f0000000180)='./file0\x00', 0x0) [ 2131.788689] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:31 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={0x4}, 0x8, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r6, 0x30, &(0x7f0000000340)={0x2c, 0x1, 0x0, 0xccab}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, &(0x7f0000000000), 0x80003) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000180)=0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getpeername$packet(0xffffffffffffffff, &(0x7f00000043c0), &(0x7f00000000c0)=0x14) 11:52:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 11:52:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="6cefd594e69553e971ada7b8002b63ae175d6d4d8436aeab844b7a3fecdf25a53030eab6fdfbadc13211cdb20511a8f3721c1c5d6315584f43f0ae9416164b07986e8083e725c66b49e8aea3d0195b1bdeea2d176ce850e938a7205449671120132912fc50fa2a6bcd9a318f390429b6d1d66772cae67a7d1f38d755cca2158f03a4655021e902780012fc558328ce5d69cc4388ca94062ffa9cbc1f237bfc8f8cbbb656a614dceaf052e00ca2187f42b8386b648a8f6ff6283b39ce0ab697263612d9d9e3f0364e2bc6cd5a1bd0f92de37848c463b3d10073c2bff7b265d2eb5494ca7f1d38b856b708a1dcd40af887efd9dd341a73be1d82914d1de484303f141e8d071eb62c5393c75c24cba0b1eaae6432f67ff72a52026c1260cf8b0274120fe47d4573bed36a89") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x30, &(0x7f0000000200)={@broadcast, @empty, [{}], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@broadcast, @broadcast}, {@current, @current}}}}}, &(0x7f0000000080)) setsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000000040)="f8f550e6", 0x4) read(r0, &(0x7f0000000100)=""/254, 0xfe) [ 2132.465668] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x13) 11:52:31 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={0x4}, 0x8, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r6, 0x30, &(0x7f0000000340)={0x2c, 0x1, 0x0, 0xccab}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, &(0x7f0000000000), 0x80003) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000180)=0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getpeername$packet(0xffffffffffffffff, &(0x7f00000043c0), &(0x7f00000000c0)=0x14) 11:52:31 executing program 0: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x102) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_open_pts(r0, 0x0) tkill(r3, 0x1000000000016) 11:52:32 executing program 0: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:32 executing program 3: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:32 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={0x4}, 0x8, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r6, 0x30, &(0x7f0000000340)={0x2c, 0x1, 0x0, 0xccab}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r2, &(0x7f0000000000), 0x80003) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000180)=0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getpeername$packet(0xffffffffffffffff, &(0x7f00000043c0), &(0x7f00000000c0)=0x14) 11:52:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="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") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) [ 2133.435980] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="6cefd594e69553e971ada7b8002b63ae175d6d4d8436aeab844b7a3fecdf25a53030eab6fdfbadc13211cdb20511a8f3721c1c5d6315584f43f0ae9416164b07986e8083e725c66b49e8aea3d0195b1bdeea2d176ce850e938a7205449671120132912fc50fa2a6bcd9a318f390429b6d1d66772cae67a7d1f38d755cca2158f03a4655021e902780012fc558328ce5d69cc4388ca94062ffa9cbc1f237bfc8f8cbbb656a614dceaf052e00ca2187f42b8386b648a8f6ff6283b39ce0ab697263612d9d9e3f0364e2bc6cd5a1bd0f92de37848c463b3d10073c2bff7b265d2eb5494ca7f1d38b856b708a1dcd40af887efd9dd341a73be1d82914d1de484303f141e8d071eb62c5393c75c24cba0b1eaae6432f67ff72a52026c1260cf8b0274120fe47d4573bed36a89") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="6cefd594e69553e971ada7b8002b63ae175d6d4d8436aeab844b7a3fecdf25a53030eab6fdfbadc13211cdb20511a8f3721c1c5d6315584f43f0ae9416164b07986e8083e725c66b49e8aea3d0195b1bdeea2d176ce850e938a7205449671120132912fc50fa2a6bcd9a318f390429b6d1d66772cae67a7d1f38d755cca2158f03a4655021e902780012fc558328ce5d69cc4388ca94062ffa9cbc1f237bfc8f8cbbb656a614dceaf052e00ca2187f42b8386b648a8f6ff6283b39ce0ab697263612d9d9e3f0364e2bc6cd5a1bd0f92de37848c463b3d10073c2bff7b265d2eb5494ca7f1d38b856b708a1dcd40af887efd9dd341a73be1d82914d1de484303f141e8d071eb62c5393c75c24cba0b1eaae6432f67ff72a52026c1260cf8b0274120fe47d4573bed36a89") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:32 executing program 0: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:32 executing program 3: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:33 executing program 0: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:33 executing program 3: getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0805ea2115aa0a"], 0x7) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) sendfile(r2, r1, &(0x7f0000000240), 0xffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x0) 11:52:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) [ 2134.317464] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:33 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="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") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="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") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) [ 2134.811242] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) [ 2134.846848] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="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") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:34 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="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") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="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") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) [ 2135.421441] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) [ 2135.752677] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) [ 2135.806114] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r2, 0xb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4000000004e24, @local}, 0xfffffffffffffff9) setsockopt$sock_int(r4, 0x1, 0x397e684a5ce171bf, &(0x7f00000004c0)=0x5dd7d56a, 0xffffffffffffff49) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1caefcadb3d8b42429f193e4657cf1bdd1263477aa", 0x26, 0xfffffffffffffffa) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r8, 0x2, &(0x7f0000000500)="6cefd594e69553e971ada7b8002b63ae175d6d4d8436aeab844b7a3fecdf25a53030eab6fdfbadc13211cdb20511a8f3721c1c5d6315584f43f0ae9416164b07986e8083e725c66b49e8aea3d0195b1bdeea2d176ce850e938a7205449671120132912fc50fa2a6bcd9a318f390429b6d1d66772cae67a7d1f38d755cca2158f03a4655021e902780012fc558328ce5d69cc4388ca94062ffa9cbc1f237bfc8f8cbbb656a614dceaf052e00ca2187f42b8386b648a8f6ff6283b39ce0ab697263612d9d9e3f0364e2bc6cd5a1bd0f92de37848c463b3d10073c2bff7b265d2eb5494ca7f1d38b856b708a1dcd40af887efd9dd341a73be1d82914d1de484303f141e8d071eb62c5393c75c24cba0b1eaae6432f67ff72a52026c1260cf8b0274120fe47d4573bed36a89") openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net\x00') write$selinux_load(r9, &(0x7f0000000240)=ANY=[], 0xfffffffffffffd59) sendfile(r1, r7, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x42602, 0x0) 11:52:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b844a) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 11:52:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) 11:52:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000000), 0x4) 11:52:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:35 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) listen(r0, 0x0) 11:52:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) openat(r2, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="7584b92eb3134e25d946346369d3863eee1cae", 0x13, 0xfffffffffffffffa) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = socket$inet6(0xa, 0x80004, 0x0) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab000082570040000000000000deecffff00000000000098030000000000005cc82dddcf99154a1605b73b8459dccffb5111c78c8f3aef"], 0x51) sendfile(r1, r5, 0x0, 0xa5cc554) [ 2136.643697] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) [ 2136.676948] SELinux: ebitmap start bit (-598113221) is not a multiple of the map unit size (64) 11:52:35 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:52:36 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 11:52:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000940)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x20000, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) 11:52:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 11:52:36 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:52:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14, &(0x7f0000000480), 0x2f8, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 11:52:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000004000), &(0x7f0000000040)=0x71) 11:52:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0), 0x4) 11:52:36 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:52:36 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 11:52:36 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0), &(0x7f0000000000), 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 11:52:36 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 11:52:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 11:52:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000004000), &(0x7f0000000040)=0x4) [ 2137.502809] audit: type=1400 audit(1542801156.643:509): avc: denied { set_context_mgr } for pid=22064 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 2137.532336] binder: 22064:22066 ioctl 40046207 0 returned -13 [ 2137.542880] binder: 22064:22066 ERROR: BC_REGISTER_LOOPER called without request 11:52:36 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 11:52:36 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f000059dffc), &(0x7f0000000000)=0x4) [ 2137.555959] binder: 22064:22066 transaction failed 29189/-22, size 0-0 line 3014 11:52:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000004000), &(0x7f0000000040)=0x4) 11:52:36 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x7, &(0x7f0000000040)={0x0, 0x19}, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:52:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f00000000c0)=""/215, 0xd7) 11:52:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000004000), &(0x7f0000000040)=0x4) [ 2138.302227] binder: 22064:22113 ERROR: BC_REGISTER_LOOPER called without request [ 2138.302263] audit: type=1400 audit(1542801157.443:510): avc: denied { set_context_mgr } for pid=22064 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 2138.302299] binder: 22064:22112 ioctl 40046207 0 returned -13 [ 2138.303561] binder: 22064:22114 transaction failed 29189/-22, size 0-0 line 3014 [ 2138.347472] binder: undelivered TRANSACTION_ERROR: 29189 [ 2138.353345] binder: undelivered TRANSACTION_ERROR: 29189 [ 2139.303763] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! 11:52:39 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:52:39 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x7, &(0x7f0000000040)={0x0, 0x19}, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:52:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000004000), &(0x7f0000000040)=0x4) 11:52:39 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0), &(0x7f0000000000), 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 11:52:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 2140.431781] audit: type=1400 audit(1542801159.573:511): avc: denied { set_context_mgr } for pid=22117 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 2140.455427] binder: 22117:22122 ioctl 40046207 0 returned -13 [ 2140.471191] binder: 22117:22122 ERROR: BC_REGISTER_LOOPER called without request 11:52:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = getpid() clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) splice(r0, &(0x7f0000000080), r0, &(0x7f0000000140), 0x1, 0x4) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/member\x00', 0x2, 0x0) 11:52:39 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x7, &(0x7f0000000040)={0x0, 0x19}, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 2140.482607] binder: 22117:22122 transaction failed 29189/-22, size 0-0 line 3014 11:52:39 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x7, &(0x7f0000000040)={0x0, 0x19}, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:52:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f00)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:39 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xffffffff80000005}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 11:52:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f00000000c0), 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 2141.225645] binder: undelivered TRANSACTION_ERROR: 29189 11:52:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f00)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:42 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 11:52:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 11:52:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:42 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0), &(0x7f0000000000), 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 11:52:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:42 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000100)=@nbd={'/dev/nbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000000)="521f8300b20d61896fb17d0899471ff65a0ea774a3ab87ccac3b16321614da4b45beddb5c85e54054641b39b928694a3f4239077c4f78fbbca6b67caa5b3ee3ce1e67992c01d4243eaa206") chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 2143.452041] audit: type=1400 audit(1542801162.593:512): avc: denied { set_context_mgr } for pid=22178 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 2143.479994] binder: 22178:22180 ioctl 40046207 0 returned -13 [ 2143.496524] binder: 22178:22180 ERROR: BC_REGISTER_LOOPER called without request [ 2143.514612] binder: 22178:22180 transaction failed 29189/-22, size 0-0 line 3014 11:52:42 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0) 11:52:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss], 0x2217) 11:52:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss], 0x2217) 11:52:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss], 0x2217) 11:52:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss], 0x2217) 11:52:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f00)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:43 executing program 0: clock_gettime(0xb, &(0x7f0000000040)) 11:52:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) [ 2144.245401] binder: undelivered TRANSACTION_ERROR: 29189 [ 2144.265555] audit: type=1400 audit(1542801163.413:513): avc: denied { set_context_mgr } for pid=22229 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 [ 2144.289157] binder: 22229:22231 ioctl 40046207 0 returned -13 11:52:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:43 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x1, 0x2, [@empty, @multicast2]}, 0x18) 11:52:43 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0), &(0x7f0000000000), 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 11:52:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000f00)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) [ 2144.306736] binder: 22229:22231 ERROR: BC_REGISTER_LOOPER called without request [ 2144.317049] binder: 22229:22231 transaction failed 29189/-22, size 0-0 line 3014 11:52:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c00060000001900a30704000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) 11:52:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 2144.408785] IPv6: Can't replace route, no match found 11:52:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000000)='|', 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) 11:52:43 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000080)="a0", 0x1}], 0x1) 11:52:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00006ed000), &(0x7f0000000040)=0x4) 11:52:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f00000003c0)="36424f64337f7f8fa978db77e4c4a6ebf717c4827d18a3643000000000f30fbcbb0000000096f2a5c463ad489efe7f00000af0422067724a595dc422c5aa717a65582436898aa2") 11:52:44 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000ad9000)=[{{0x0, 0x0, &(0x7f0000bff000), 0x0, &(0x7f0000cc3fe8)=[{0x10}], 0x10}}], 0x1, 0x0) [ 2145.065474] binder: undelivered TRANSACTION_ERROR: 29189 11:52:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x1f) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") 11:52:44 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f00000002c0)) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimensat(r0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) 11:52:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xfdd3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010198c7f7fcd04cd0f2902") 11:52:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x4cfe480a, 0x7d) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) bind$inet6(r1, &(0x7f0000fe8fe4)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 11:52:44 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000180)='\x00', &(0x7f0000000400), &(0x7f00000003c0), 0x1000) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}, &(0x7f00000002c0)) io_setup(0x1, &(0x7f0000000140)=0x0) io_destroy(r1) 11:52:44 executing program 0: r0 = socket(0x20002000000010, 0x802, 0x0) r1 = dup(r0) write(r1, &(0x7f00000001c0)="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", 0xfc) 11:52:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f00000003c0)="36424f64337f7f8fa978db77e4c4a6ebf717c4827d18a3643000000000f30fbcbb0000000096f2a5c463ad489efe7f00000af0422067724a595dc422c5aa717a65582436898aa2") 11:52:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000dbb000), &(0x7f0000329000)=0x4) 11:52:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 11:52:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f00000001c0), 0x14) close(r0) 11:52:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 11:52:45 executing program 5: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x9}, 0x8) r2 = getpgid(0xffffffffffffffff) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$nbd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000380)=0x6) sched_getparam(r2, &(0x7f0000000340)) memfd_create(&(0x7f0000000080)="2a76626f786e657430a12a2d3a6b657972696e6700", 0x0) 11:52:45 executing program 1: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000500)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) add_key(&(0x7f00000003c0)="730200000000000000002702db3ef1c6fe5352fda2a5826269f5cd8808371a2af21e2e658449b30c2a6234120b7909cb63a609ed4abf19b90479eb62e7fa2ca51d0fb192a41dd56e0cb814d6c49bcad32cba723dd14ae8cc51cbd96cfc12902a9d2799c0e27f632f34b36e8e0e2878daecc7ee186a331b1a9916aeb7dac41e425b306d", &(0x7f0000000040), 0xfffffffffffffffe, 0xfe6f, 0x0) 11:52:45 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0xff, 0x1}, 0x20) 11:52:45 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000100)={{}, {r0, r1/1000+10000}}, &(0x7f0000000180)) alarm(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 11:52:45 executing program 1: write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x67, 0x0, {0x0, 0x0, 0x7}}, 0x14) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x1000000002802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, "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", 0x1000}, 0x1006) 11:52:45 executing program 1: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:52:45 executing program 4: clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000040)) getpgrp(0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x60000000, &(0x7f0000000180)) [ 2146.236358] audit: type=1326 audit(1542801165.353:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=22387 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 11:52:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f00000003c0)="36424f64337f7f8fa978db77e4c4a6ebf717c4827d18a3643000000000f30fbcbb0000000096f2a5c463ad489efe7f00000af0422067724a595dc422c5aa717a65582436898aa2") 11:52:46 executing program 0: keyctl$set_reqkey_keyring(0x11, 0xfffffff7fffffffc) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000c00)='qnx6\x00', 0x0, &(0x7f0000000cc0)='mangle\x00') creat(&(0x7f0000000c40)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000c80)) epoll_create(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000140)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000040)="1636118d0642c593d377be1b675527fe17f8f201d03d8cd630dd1c447a9795a0"}) pipe2(&(0x7f0000000340), 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000580), 0x4) getuid() stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) getgroups(0x5f9, &(0x7f0000000800)) fstat(0xffffffffffffffff, &(0x7f0000000400)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getresgid(&(0x7f0000000380), &(0x7f0000000500), &(0x7f0000000540)) getgroups(0x0, &(0x7f0000000580)) mkdirat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000240)="42805da0ca24a3a3ef69dc0f01ee0dce41cbff9191a33d06290028770f0f993d233d234142d85d096b2179660f38302fbae5e5e575450f2e1ac4010d64ac1e5d31a3b7e29873bb7f") setns(0xffffffffffffffff, 0x0) 11:52:46 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x2}) 11:52:46 executing program 4: prctl$PR_SET_THP_DISABLE(0x29, 0x1) 11:52:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x8, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) [ 2147.014859] audit: type=1326 audit(1542801166.163:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=22387 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 11:52:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x8, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 11:52:46 executing program 0: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:52:46 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xffffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chroot(&(0x7f0000000000)='./file0/bus/file0\x00') 11:52:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000940)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:52:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x8, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 11:52:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @ipv4={[], [], @broadcast}, @ipv4={[], [], @local}, 0x7, 0x3, 0x100000000, 0x500, 0x1, 0x0, r2}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) [ 2147.274416] input: syz1 as /devices/virtual/input/input359 11:52:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f00000003c0)="36424f64337f7f8fa978db77e4c4a6ebf717c4827d18a3643000000000f30fbcbb0000000096f2a5c463ad489efe7f00000af0422067724a595dc422c5aa717a65582436898aa2") 11:52:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) ioctl$TCSETAF(r1, 0x541b, &(0x7f0000000000)) 11:52:46 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") 11:52:47 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") 11:52:47 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") 11:52:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:47 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") syz_execute_func(&(0x7f0000000140)="cd80c20000b0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4d408064797f41dfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc4d96040476789f") 11:52:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="000200a6241c7d6dfe7b4a50f76debcb52da544462388c55441da67ab26f1668250af58daf1a30278cf21bed540477417a265079f7d1eb3a650f9480f4") fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) 11:52:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:52:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8982, &(0x7f0000000240)={@dev}) dup2(r1, r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000080)) 11:52:49 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/165) 11:52:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x8, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 11:52:49 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x9}, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 11:52:49 executing program 0: capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002}, 0xc) 11:52:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000940)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:52:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000140), 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) 11:52:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x6, 0xff}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:52:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000000)='./bus\x00', 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f00000001c0), 0x0) 11:52:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) [ 2150.269301] input: syz1 as /devices/virtual/input/input361 11:52:49 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000180)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffffc, 0xa4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:52:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') lseek(r0, 0x0, 0x4) 11:52:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000002b80)=""/62, 0x3e}}], 0x1, 0x0, 0x0) 11:52:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11:52:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:52:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fd\x00') clone(0x0, &(0x7f0000000300), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000012c0)) fchown(r0, 0x0, 0x0) 11:52:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000940)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:52:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 11:52:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000140), 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) 11:52:52 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8971, &(0x7f0000000100)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_channels}) [ 2153.277441] audit: type=1400 audit(1542801172.423:516): avc: denied { setattr } for pid=22579 comm="syz-executor1" name="fd" dev="proc" ino=331071 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=0 [ 2153.303102] input: syz1 as /devices/virtual/input/input362 11:52:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x10000000001, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r3, &(0x7f0000000240)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x33) dup2(r0, r3) r4 = gettid() tkill(r4, 0x2a) dup2(r1, r2) [ 2153.324461] audit: type=1400 audit(1542801172.463:517): avc: denied { setattr } for pid=22579 comm="syz-executor1" name="fd" dev="proc" ino=331071 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=0 11:52:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:52:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3, 0x9) 11:52:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0xfeffffffffffffff, 0x4) 11:52:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, r0) 11:52:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x13, 0x509, 0x0, 0x0, {0x7}}, 0x18}}, 0x0) 11:52:53 executing program 4: clone(0x40004145, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x0, 0xffffffff, 0x1, 0x7e, 0x81}) 11:52:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 11:52:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000940)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) msync(&(0x7f0000d5b000/0x4000)=nil, 0x4000, 0x2000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:52:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000140), 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) 11:52:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/152) 11:52:53 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = socket(0x1, 0x80001, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) [ 2154.299266] input: syz1 as /devices/virtual/input/input363 [ 2154.373634] input: syz1 as /devices/virtual/input/input365 11:52:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100b5000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 11:52:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/152) [ 2154.422605] input: syz1 as /devices/virtual/input/input364 11:52:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={"6270816b213600", 0x43732e5398416f1e}) r2 = memfd_create(&(0x7f0000000140)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) write$eventfd(r2, &(0x7f0000000100)=0xa, 0x2) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000000)) ioctl$TUNSETSNDBUF(r0, 0x400454d8, &(0x7f0000000040)) [ 2154.503269] input: syz1 as /devices/virtual/input/input366 11:52:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000004380), 0x0, &(0x7f0000004400)}}, {{&(0x7f0000007440)=@ethernet, 0x80, &(0x7f0000007580), 0x0, 0x0, 0xae}}], 0x2, 0x0) 11:52:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/152) 11:52:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100b5000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) [ 2154.671730] input: syz1 as /devices/virtual/input/input367 11:52:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000180)=""/152) [ 2154.848642] input: syz1 as /devices/virtual/input/input368 11:52:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x20800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000140), 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) 11:52:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100b5000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 11:52:54 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000004c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000000000)={0x25f, &(0x7f00000000c0)=[{}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000200)={"65716c000000a95b00", @ifru_flags=0x2}) 11:52:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x241, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="6b254073af94", 0x6}], 0x1, 0x0) 11:52:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x4000000000000fe, 0x0) 11:52:54 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000080), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @local}, @loopback, @remote, 0x0, 0x0, 0x0, 0x116}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) [ 2155.486556] audit: type=1400 audit(1542801174.633:518): avc: denied { create } for pid=22709 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:52:54 executing program 4: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) accept4$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x800) 11:52:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x80000000, 0x6, 0x0, 0xbd, 0x0, 0x4}) syz_open_pts(r0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCSBRK(r0, 0x5427) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000001c0)) socket$inet(0x2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'icmp\x00'}, &(0x7f0000000380)=0x2d0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_getroute={0x1b, 0x1a, 0x13, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2155.537937] keychord: Insufficient bytes present for keycount 0 [ 2155.548757] audit: type=1400 audit(1542801174.693:519): avc: denied { create } for pid=22709 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2155.600679] audit: type=1400 audit(1542801174.743:520): avc: denied { create } for pid=22709 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:52:54 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r1, 0x0) 11:52:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100b5000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 11:52:54 executing program 1: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) r0 = getpid() tgkill(r0, r0, 0x0) [ 2155.637908] audit: type=1400 audit(1542801174.783:521): avc: denied { create } for pid=22709 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:52:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000012f70), 0x0, &(0x7f0000000000)=[{0x28, 0x29, 0x3b, "270202010000007efe8000000000000052"}], 0x28}, 0x0) 11:52:55 executing program 2: r0 = gettid() setpriority(0x1, r0, 0x0) 11:52:55 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000100800120000ffff1500000000000000fd3900000000000000000080100000000ee000000147115260a8044f94dfa0433b1f0d6171000000003500000000000000000000000002000003e800"], 0x5b}}, 0x0) socketpair(0xb, 0x80006, 0xde, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302023212020202f200a71df4e686ed7b551c4f5d6d30f21bd40e6a7cbb6dd5d0bf6b711e93e1a4a46fa09dad4fe7a8276ed9fe3cab18e0c64e1281d702a1f07c06190bd79a19430e2717921a6549b6e9ba6cffe0c40b05a96e74a07252f1fea"], 0x69) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8, 0x0, 0x1, 0x7fffffff}}, 0x20) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x804, 0x0) getdents(r0, &(0x7f0000000400)=""/37, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='veth1\x00', 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r3, 0x80008956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[], 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x40000a9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r4, &(0x7f0000000180), 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x800000000000286, 0x40002) munlockall() ioctl$KDENABIO(r8, 0x4b36) 11:52:55 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x541b, 0x709000) 11:52:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect(r2, &(0x7f0000000100)=@nl=@unspec, 0x80) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 11:52:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) [ 2156.318402] audit: type=1400 audit(1542801175.463:522): avc: denied { set_context_mgr } for pid=22771 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 11:52:55 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x541b, 0x709000) 11:52:55 executing program 4: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) accept4$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x800) [ 2156.597295] binder: 22771:22772 ioctl 40046207 0 returned -13 [ 2156.603588] binder: 22771:22776 transaction failed 29189/-22, size 24-8 line 3014 [ 2156.614138] binder: 22771:22782 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2156.666292] binder_alloc: binder_alloc_mmap_handler: 22771 20001000-20004000 already mapped failed -16 [ 2156.712352] audit: type=1400 audit(1542801175.853:523): avc: denied { set_context_mgr } for pid=22771 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=0 11:52:55 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffff804}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000000080), &(0x7f0000000040), 0x8) 11:52:55 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000100800120000ffff1500000000000000fd3900000000000000000080100000000ee000000147115260a8044f94dfa0433b1f0d6171000000003500000000000000000000000002000003e800"], 0x5b}}, 0x0) socketpair(0xb, 0x80006, 0xde, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302023212020202f200a71df4e686ed7b551c4f5d6d30f21bd40e6a7cbb6dd5d0bf6b711e93e1a4a46fa09dad4fe7a8276ed9fe3cab18e0c64e1281d702a1f07c06190bd79a19430e2717921a6549b6e9ba6cffe0c40b05a96e74a07252f1fea"], 0x69) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8, 0x0, 0x1, 0x7fffffff}}, 0x20) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x804, 0x0) getdents(r0, &(0x7f0000000400)=""/37, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='veth1\x00', 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r3, 0x80008956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[], 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x40000a9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r4, &(0x7f0000000180), 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x800000000000286, 0x40002) munlockall() ioctl$KDENABIO(r8, 0x4b36) 11:52:55 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x541b, 0x709000) 11:52:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00006ed000), &(0x7f0000000080)=0xff2e) [ 2156.791721] binder: 22771:22772 ioctl 40046207 0 returned -13 [ 2156.797691] binder: 22771:22782 transaction failed 29189/-22, size 24-8 line 3014 [ 2156.805681] binder: 22771:22776 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2156.813732] binder: undelivered TRANSACTION_ERROR: 29189 [ 2156.827098] binder: undelivered TRANSACTION_ERROR: 29189 11:52:56 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x541b, 0x709000) 11:52:56 executing program 0: r0 = getpgrp(0x0) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xffffffffffffff7e}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x30, &(0x7f0000000000)={0x0, 0x0, 0x70002}) rt_sigtimedwait(&(0x7f0000000200)={0x7fffffffffffff66}, &(0x7f0000a72ff0), &(0x7f0000a72000)={0x0, 0x1c9c380}, 0x8) 11:52:56 executing program 3: pipe(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) tee(r1, r0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xff8d) close(r2) 11:52:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffe, 0x1) 11:52:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) exit(0x0) 11:52:56 executing program 2: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x800) 11:52:56 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000100800120000ffff1500000000000000fd3900000000000000000080100000000ee000000147115260a8044f94dfa0433b1f0d6171000000003500000000000000000000000002000003e800"], 0x5b}}, 0x0) socketpair(0xb, 0x80006, 0xde, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302023212020202f200a71df4e686ed7b551c4f5d6d30f21bd40e6a7cbb6dd5d0bf6b711e93e1a4a46fa09dad4fe7a8276ed9fe3cab18e0c64e1281d702a1f07c06190bd79a19430e2717921a6549b6e9ba6cffe0c40b05a96e74a07252f1fea"], 0x69) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8, 0x0, 0x1, 0x7fffffff}}, 0x20) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x804, 0x0) getdents(r0, &(0x7f0000000400)=""/37, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='veth1\x00', 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r3, 0x80008956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[], 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x40000a9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r4, &(0x7f0000000180), 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x800000000000286, 0x40002) munlockall() ioctl$KDENABIO(r8, 0x4b36) 11:52:56 executing program 4: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) accept4$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x800) 11:52:56 executing program 2: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) 11:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 11:52:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="24000000020307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) 11:52:56 executing program 5: r0 = socket$inet(0x10, 0x2, 0x84000000000009) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000530463031d72434b0020ced1", 0x10}], 0x1}, 0x0) [ 2157.286934] audit: type=1400 audit(1542801176.433:524): avc: denied { create } for pid=22855 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:52:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x8000000000000002, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 11:52:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) [ 2157.388038] audit: type=1400 audit(1542801176.533:525): avc: denied { create } for pid=22855 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:52:56 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000100800120000ffff1500000000000000fd3900000000000000000080100000000ee000000147115260a8044f94dfa0433b1f0d6171000000003500000000000000000000000002000003e800"], 0x5b}}, 0x0) socketpair(0xb, 0x80006, 0xde, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/228) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302023212020202f200a71df4e686ed7b551c4f5d6d30f21bd40e6a7cbb6dd5d0bf6b711e93e1a4a46fa09dad4fe7a8276ed9fe3cab18e0c64e1281d702a1f07c06190bd79a19430e2717921a6549b6e9ba6cffe0c40b05a96e74a07252f1fea"], 0x69) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_IOCTL(r7, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8, 0x0, 0x1, 0x7fffffff}}, 0x20) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x804, 0x0) getdents(r0, &(0x7f0000000400)=""/37, 0x25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='veth1\x00', 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r3, 0x80008956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[], 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x40000a9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r4, &(0x7f0000000180), 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x800000000000286, 0x40002) munlockall() ioctl$KDENABIO(r8, 0x4b36) 11:52:56 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) 11:52:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @broadcast}, 0x10) 11:52:56 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@multicast1}}, {{@in6}}}, &(0x7f0000000140)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[], 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f0000e7fffc), 0x0) 11:52:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) 11:52:57 executing program 4: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) accept4$unix(r0, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x800) 11:52:57 executing program 2: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) 11:52:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 11:52:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000015c0), &(0x7f00000000c0)=0x4) 11:52:57 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) 11:52:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) [ 2158.859349] audit_printk_skb: 12 callbacks suppressed [ 2158.866525] audit: type=1400 audit(1542801178.003:530): avc: denied { create } for pid=22926 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2158.910932] audit: type=1400 audit(1542801178.053:531): avc: denied { create } for pid=22926 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2159.017042] audit: type=1400 audit(1542801178.163:532): avc: denied { create } for pid=22925 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2159.145020] audit: type=1400 audit(1542801178.293:533): avc: denied { create } for pid=22925 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:52:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) 11:52:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) 11:52:59 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) 11:52:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 11:52:59 executing program 2: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) 11:52:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) [ 2160.266294] audit: type=1400 audit(1542801179.413:534): avc: denied { create } for pid=22954 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2160.305554] audit: type=1400 audit(1542801179.453:535): avc: denied { create } for pid=22954 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:52:59 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) [ 2160.651851] audit: type=1400 audit(1542801179.793:536): avc: denied { create } for pid=22963 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2160.736391] audit: type=1400 audit(1542801179.883:537): avc: denied { create } for pid=22978 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2160.823680] audit: type=1400 audit(1542801179.963:538): avc: denied { create } for pid=22978 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:53:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) 11:53:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) 11:53:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) 11:53:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 11:53:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) [ 2161.252703] audit: type=1400 audit(1542801180.393:539): avc: denied { create } for pid=22963 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 11:53:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) 11:53:01 executing program 1: r0 = socket(0x10, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000080), 0x0) close(r0) 11:53:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) 11:53:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000380)=0x401, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ifb0\x00'}) 11:53:01 executing program 2: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@generic) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0xffffff50) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000780)=[&(0x7f00000006c0)='/selinux/context\x00'], 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x3c, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x3c}}, 0x20044005) pipe2(&(0x7f0000000400), 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="e52600", 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)={@local}, &(0x7f0000000940)=0xffffffffffffff89) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000002c0)=""/81) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000003c0)='ip6_vti0\x00') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x2}) fdatasync(r3) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="00fb2fb9004304056ed5cccabeab56cced0ce566c7ac005af9c1ede25c0563fb276c55029dc62303000000000000004f89d78f40e5fedbf181125852817aa066ede2d32b9ad458c017e9d2e0f4f0315d844cc89105d19153f113a468d66d0e773b"], 0x1, 0x1) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000980)=""/129) 11:53:01 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0xb3e60296ee421720, 0x0) eventfd(0xcd) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/zero\x00', 0x80, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) fcntl$setstatus(r1, 0x4, 0x6800) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) 11:53:01 executing program 1: r0 = socket(0x10, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000080), 0x0) close(r0) 11:53:01 executing program 1: r0 = socket(0x10, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000080), 0x0) close(r0) 11:53:01 executing program 1: r0 = socket(0x10, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000080), 0x0) close(r0) 11:53:01 executing program 1: clock_gettime(0xfffffffffffffff9, &(0x7f0000000980)) 11:53:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000140)=""/11, 0x40a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) r3 = syz_open_pts(r0, 0x0) dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 11:53:01 executing program 1: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84800) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100051, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5"], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x6}) pwritev(r2, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000fbff356e98cfffffffffffff00000000000000000000002aa4e483c9c73b708d720000000000"]) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) 11:53:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x40001) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl(r0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x8001004000000016) 11:53:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80003, 0xc) write(r1, &(0x7f0000000040)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 11:53:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmsg(r1, &(0x7f0000002900)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002840), 0x0, &(0x7f00000001c0)=""/32, 0x20}, 0x0) sendmmsg(r0, &(0x7f000000d8c0)=[{}], 0x1, 0x0) 11:53:03 executing program 0: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="914c20b1037e3ed73415adb953977fa8e3da4066", 0x14) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 11:53:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{&(0x7f0000001680)='8B\f', 0x3}], 0x1, 0x6) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0xcbb, 0x3, 0x3, 0x8}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) getpid() [ 2164.138707] audit_printk_skb: 6 callbacks suppressed [ 2164.145439] audit: type=1400 audit(1542801183.283:542): avc: denied { create } for pid=23069 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 11:53:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa283000700000006faffffff1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 2164.179229] audit: type=1400 audit(1542801183.323:543): avc: denied { create } for pid=23069 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 [ 2164.192094] input: syz1 as /devices/virtual/input/input369 11:53:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x7db2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xfffff}) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0) 11:53:03 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x4, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000dc6ffe), &(0x7f0000904000)=0x4) 11:53:03 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2, 0x0, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:53:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) accept4(0xffffffffffffffff, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x80, 0x80000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d000010200000000000000000000003000f08ca80080002001068e000000000000000000000000800120001000200000000000000000034000000020300000000000f000000000a0000000000000092ab000000000001"], 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'veth0\x00'}) 11:53:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{&(0x7f0000001680)='8B\f', 0x3}], 0x1, 0x6) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0xcbb, 0x3, 0x3, 0x8}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) getpid() [ 2164.443682] PF_BRIDGE: RTM_SETLINK with unknown ifindex [ 2164.475953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 2164.497108] PF_BRIDGE: RTM_SETLINK with unknown ifindex [ 2164.519651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 11:53:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{&(0x7f0000001680)='8B\f', 0x3}], 0x1, 0x6) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0xcbb, 0x3, 0x3, 0x8}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) getpid() 11:53:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) fstat(0xffffffffffffffff, &(0x7f00000004c0)) creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="ef4a113e4a37b2f7d978d215c360"], 0xe) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 11:53:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) 11:53:04 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x210007d9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x40024, &(0x7f0000000600)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) writev(0xffffffffffffffff, 0x0, 0x0) 11:53:04 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 11:53:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{&(0x7f0000001680)='8B\f', 0x3}], 0x1, 0x6) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0xcbb, 0x3, 0x3, 0x8}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) getpid() [ 2165.692071] SELinux: duplicate or incompatible mount options [ 2165.707980] SELinux: duplicate or incompatible mount options 11:53:04 executing program 2: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000469ffc), 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0x4, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000400000000ff00000000000000000001000000000000000000feff00d0e7b5b346b0b14400000000000008000000da0a00000000000000000000000000000000000000000000000000000000000000bd33b3b6cff02c0206"]) tkill(r0, 0x1000000000016) [ 2165.858597] input: syz1 as /devices/virtual/input/input370 [ 2166.017372] input: syz1 as /devices/virtual/input/input371 [ 2166.183790] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! 11:53:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r2, 0x0, 0xa5cc554) 11:53:06 executing program 2: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000469ffc), 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0x4, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000400000000ff00000000000000000001000000000000000000feff00d0e7b5b346b0b14400000000000008000000da0a00000000000000000000000000000000000000000000000000000000000000bd33b3b6cff02c0206"]) tkill(r0, 0x1000000000016) 11:53:06 executing program 4: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000100)="05010000050000000021aa00f7b25ba32f938207", 0x14, 0x0, &(0x7f0000000300)={0xa, 0x100202020800, 0x2, @mcast2}, 0x1c) 11:53:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="5d000000290040040000000800000000080000000000000000000000000000001f05002e2f6275739900000000070000000000000005002e2f627573080000000000000000660000b204c55254fb47dd0d8e9de5bd8eccdd899db4046cab0846791fb305d109172a04dac7ade9c74645576448bbff60770057513280b6e3a4fd6057031bef4268a54be00ba31192d0946ae24faa4f6ca9bd0d234a7dc409e8a03d40fb84e9711af1829ee8828a91ae317086a640d6cf832dcece8fd8c359798dd9c89aefa7b01ca59d903b5240020e1a48126e043c8a7088983ee98b6e6d0ca060b9a130e4f1ad109b802ddf6ae0966c01d0189abe5fd1b1e656923313119e22c940dc90fe6568a66360f76fe13955044dd6771d7ecf28696ea1678e9ee4f80c48fc32785d4e93b10244"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r2, 0x0, 0xa5cc554) [ 2167.228713] input: syz1 as /devices/virtual/input/input372 11:53:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) 11:53:06 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) [ 2167.301934] input: syz1 as /devices/virtual/input/input373 [ 2167.463903] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! 11:53:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r2, 0x0, 0xa5cc554) 11:53:07 executing program 2: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000469ffc), 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0x4, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000400000000ff00000000000000000001000000000000000000feff00d0e7b5b346b0b14400000000000008000000da0a00000000000000000000000000000000000000000000000000000000000000bd33b3b6cff02c0206"]) tkill(r0, 0x1000000000016) 11:53:07 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) 11:53:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="5d000000290040040000000800000000080000000000000000000000000000001f05002e2f6275739900000000070000000000000005002e2f627573080000000000000000660000b204c55254fb47dd0d8e9de5bd8eccdd899db4046cab0846791fb305d109172a04dac7ade9c74645576448bbff60770057513280b6e3a4fd6057031bef4268a54be00ba31192d0946ae24faa4f6ca9bd0d234a7dc409e8a03d40fb84e9711af1829ee8828a91ae317086a640d6cf832dcece8fd8c359798dd9c89aefa7b01ca59d903b5240020e1a48126e043c8a7088983ee98b6e6d0ca060b9a130e4f1ad109b802ddf6ae0966c01d0189abe5fd1b1e656923313119e22c940dc90fe6568a66360f76fe13955044dd6771d7ecf28696ea1678e9ee4f80c48fc32785d4e93b10244"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x4e24, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3, 0x1000}}) 11:53:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) [ 2168.686580] input: syz1 as /devices/virtual/input/input374 [ 2168.755295] input: syz1 as /devices/virtual/input/input375 11:53:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r2, 0x0, 0xa5cc554) 11:53:08 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) 11:53:08 executing program 2: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000469ffc), 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0x4, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000280), 0x4) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000400000000ff00000000000000000001000000000000000000feff00d0e7b5b346b0b14400000000000008000000da0a00000000000000000000000000000000000000000000000000000000000000bd33b3b6cff02c0206"]) tkill(r0, 0x1000000000016) 11:53:09 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) 11:53:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) 11:53:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) 11:53:09 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) 11:53:09 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) 11:53:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x45) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) 11:53:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11:53:10 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x1c}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 11:53:10 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffff9, 0x8) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 11:53:10 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x0, 0x3}]) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) r3 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r3, r0) 11:53:10 executing program 4: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xffea) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) 11:53:10 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) 11:53:10 executing program 4: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xffea) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) 11:53:10 executing program 4: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xffea) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) 11:53:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x3}, {0x60}, {0x6}]}, 0x10) 11:53:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x802fffffffe}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1) 11:53:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 11:53:10 executing program 4: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xffea) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) 11:53:10 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0xc0ed0000, 0x0) 11:53:10 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:10 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@xdp, &(0x7f0000000ac0)=0x80) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@rand_addr, @loopback}, &(0x7f0000003c80)=0x3ef) getsockname$packet(0xffffffffffffffff, &(0x7f0000004200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004240)=0x14) getpeername(0xffffffffffffffff, &(0x7f00000046c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004740)=0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) sendfile(r3, r4, 0x0, 0xa5cc550) 11:53:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:53:10 executing program 4: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30}, 0x30) ppoll(&(0x7f0000000040), 0xb, 0x0, 0x0, 0xffffffffffffff6e) 11:53:10 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0xc0ed0000, 0x0) 11:53:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r1 = inotify_init1(0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) 11:53:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r1 = inotify_init1(0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) 11:53:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r1 = inotify_init1(0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) 11:53:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r1 = inotify_init1(0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) 11:53:11 executing program 4: r0 = memfd_create(&(0x7f0000000140)='+procloselinuxeth0system\x00', 0x0) lseek(r0, 0xfffffffffffffffc, 0x3) 11:53:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0xc0ed0000, 0x0) 11:53:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 11:53:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:53:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:53:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0xc0ed0000, 0x0) 11:53:11 executing program 3: clock_gettime(0x8, &(0x7f00000002c0)) clock_settime(0x0, &(0x7f0000000200)) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000680)) syslog(0x0, &(0x7f0000000080)=""/110, 0x6e) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0), 0x14) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000140)="42805da0bd0fef69dc0f01eece73fe19fa380f38211af3f0817e768cc80000000081b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac4010d64ac1e5d31a3b74472e671fb0703") timerfd_create(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000380), 0xffffffffffffff99) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000580)) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0x9) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[]}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f6367797ab100", 0x200002, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_execute_func(&(0x7f0000000600)="42805da0120fef69dc0f01ee1fc03b0619fad20e38211af30f71d60cc481b5e5bc2b0000002167f00fbab204000000ca6b217975450f2e1ac4010d64ac1e5d31a3b7867b6443f75b05") epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)) 11:53:11 executing program 2: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) prctl$PR_SET_SECUREBITS(0x1c, 0x0) [ 2172.405039] device syz_tun entered promiscuous mode [ 2172.412469] device lo left promiscuous mode [ 2172.443746] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 2172.464153] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 2172.471328] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 2172.478570] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2172.485749] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2172.492941] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2172.500152] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2172.533963] device syz_tun left promiscuous mode 11:53:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:53:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 2172.626429] device syz_tun entered promiscuous mode [ 2172.653674] device syz_tun left promiscuous mode [ 2172.663890] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 2172.670917] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 2172.677939] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 2172.684963] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2172.691979] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 11:53:11 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4203, r1, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=""/130, 0x4d3}) 11:53:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:53:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 2172.699019] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2172.706054] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2172.754871] device syz_tun entered promiscuous mode [ 2172.770010] device syz_tun left promiscuous mode [ 2172.785600] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 2172.792625] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 2172.799654] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 2172.806669] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2172.813702] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2172.820707] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2172.827736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2172.853832] ip6_tunnel: À xmit: Local address not yet configured! 11:53:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 2173.065125] device syz_tun entered promiscuous mode [ 2173.078315] device syz_tun left promiscuous mode [ 2173.103965] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 2173.111048] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 2173.118135] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2173.125071] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2173.132003] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2173.139203] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2173.146406] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 2173.153330] ip6_tunnel: À xmit: Local address not yet configured! [ 2173.193584] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! 11:53:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:12 executing program 3: clone(0x80a00100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/137, 0x89) 11:53:12 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11:53:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:53:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 11:53:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) [ 2173.253606] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 2173.285867] device syz_tun entered promiscuous mode [ 2173.293678] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2173.373978] ip6_tunnel: À xmit: Local address not yet configured! 11:53:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = gettid() clone(0x2040000003, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x8000000000000014) r2 = socket$inet6(0xa, 0x0, 0x3) sync() wait4(0x0, &(0x7f0000000180), 0x80000000, &(0x7f0000000280)) socket$inet6(0xa, 0x0, 0x7) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x1, 0x0, 0x6, 0xcf0f, 0x5, 0x563d}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x5, 0x2, 0x21}, 0x40}}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000002, 0x13, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'veth0_to_bond\x00'}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) pipe(&(0x7f0000000340)) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000440)="87bef7d33a4d3e7cb73bd04af757b0027143759d3dbbc44e67c09ac0f0c0f0afda1b6a7dbd9d20eb49e974e7582a5d11fd63ed99e1d393f6e93f322140e520189a8a49da4dc92cd084bac8351c4bc90886224a521150534af57142b46136436d12a3447d9b0e9ca21a4217658ad579098627bc6f8741481e30f0a6496ee685a66b3ae8be4538b446ca32024c15d71445623e269403ea22435d58d537cf696c56c52800fa96a1ed76f8e6d7269fb306dfa7001a012784be3ecadf1f1713ea4dee2fdf6d4934b3229c418236deedad538c33", 0xd1}], 0x1, 0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 2173.433665] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2173.545336] device syz_tun left promiscuous mode 11:53:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) getsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000004000), &(0x7f0000000040)=0x71) 11:53:12 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 2173.653689] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2173.704816] device syz_tun entered promiscuous mode 11:53:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000080), &(0x7f0000000140)=0xc8) 11:53:12 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000540)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/2, 0x450) [ 2173.729404] device syz_tun left promiscuous mode [ 2173.743875] ip6_tunnel: À xmit: Local address not yet configured! 11:53:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) [ 2173.782448] proc: unrecognized mount option "" or missing value [ 2173.843656] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 2174.093630] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 11:53:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 11:53:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 11:53:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) 11:53:13 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RRENAME(r3, &(0x7f00000003c0)={0x7}, 0x7) ftruncate(r3, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r2, 0x10, 0x0, 0x3) [ 2174.313698] ip6_tunnel: À xmit: Local address not yet configured! 11:53:13 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff}) 11:53:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 11:53:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = gettid() clone(0x2040000003, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x8000000000000014) r2 = socket$inet6(0xa, 0x0, 0x3) sync() wait4(0x0, &(0x7f0000000180), 0x80000000, &(0x7f0000000280)) socket$inet6(0xa, 0x0, 0x7) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x1, 0x0, 0x6, 0xcf0f, 0x5, 0x563d}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x5, 0x2, 0x21}, 0x40}}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000002, 0x13, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'veth0_to_bond\x00'}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) pipe(&(0x7f0000000340)) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000440)="87bef7d33a4d3e7cb73bd04af757b0027143759d3dbbc44e67c09ac0f0c0f0afda1b6a7dbd9d20eb49e974e7582a5d11fd63ed99e1d393f6e93f322140e520189a8a49da4dc92cd084bac8351c4bc90886224a521150534af57142b46136436d12a3447d9b0e9ca21a4217658ad579098627bc6f8741481e30f0a6496ee685a66b3ae8be4538b446ca32024c15d71445623e269403ea22435d58d537cf696c56c52800fa96a1ed76f8e6d7269fb306dfa7001a012784be3ecadf1f1713ea4dee2fdf6d4934b3229c418236deedad538c33", 0xd1}], 0x1, 0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 11:53:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) unshare(0x400) readv(r0, &(0x7f0000000140), 0x0) 11:53:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x94e, 0xae) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:53:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000461000)={0x10, 0x0, 0x2}, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2, 0xfffffffffffffffe}, 0xc) 11:53:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x2}}, 0x18) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x429) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000380)=0x30) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)) sync_file_range(0xffffffffffffffff, 0x2, 0x3000000000000000, 0x5) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) dup3(r0, r0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = dup2(0xffffffffffffffff, r2) clone(0x0, &(0x7f0000000a80)="35691bff0d4dbe32a6cd1800ab4eda8f85565283fa4821579fbbbd750dd070805e0badb3ba036b2874acca1f912658d3656feb1db372ef285d2264b220fbae3e6fe8c7c96c91c6b3062cdbc70023cf76cd07a60229a66b6b", &(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000b80)="6077ea91") accept(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f0000000280)=0xe6) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0xffffffff}}, 0x28) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000500)=0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 11:53:15 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000001}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") rt_sigqueueinfo(r0, 0x3a, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff7}) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0x70f000) 11:53:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) write$FUSE_DIRENT(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11:53:15 executing program 4: r0 = socket(0x10, 0x9000000000002, 0x0) write(r0, &(0x7f0000000040)="240000002e0007ef310000080036774afbe3034901000000000000e703ff7ffff3040000", 0x24) 11:53:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x210) dup3(r0, r1, 0x0) 11:53:15 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @remote, @mcast2, 0xfffffffffffffffe, 0x0, 0x0, 0x11b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 11:53:15 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @remote, @mcast2, 0xfffffffffffffffe, 0x0, 0x0, 0x11b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) [ 2176.779700] audit: type=1400 audit(1542801195.923:544): avc: denied { mounton } for pid=23602 comm="syz-executor2" path="pipe:[5971]" dev="pipefs" ino=5971 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=0 11:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x8}, @FRA_FLOW={0x8}, @FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x44}}, 0x0) 11:53:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = gettid() clone(0x2040000003, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x8000000000000014) r2 = socket$inet6(0xa, 0x0, 0x3) sync() wait4(0x0, &(0x7f0000000180), 0x80000000, &(0x7f0000000280)) socket$inet6(0xa, 0x0, 0x7) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x1, 0x0, 0x6, 0xcf0f, 0x5, 0x563d}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x5, 0x2, 0x21}, 0x40}}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000002, 0x13, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'veth0_to_bond\x00'}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) pipe(&(0x7f0000000340)) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000440)="87bef7d33a4d3e7cb73bd04af757b0027143759d3dbbc44e67c09ac0f0c0f0afda1b6a7dbd9d20eb49e974e7582a5d11fd63ed99e1d393f6e93f322140e520189a8a49da4dc92cd084bac8351c4bc90886224a521150534af57142b46136436d12a3447d9b0e9ca21a4217658ad579098627bc6f8741481e30f0a6496ee685a66b3ae8be4538b446ca32024c15d71445623e269403ea22435d58d537cf696c56c52800fa96a1ed76f8e6d7269fb306dfa7001a012784be3ecadf1f1713ea4dee2fdf6d4934b3229c418236deedad538c33", 0xd1}], 0x1, 0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 11:53:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 11:53:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fgetxattr(r0, &(0x7f00000000c0)=@random={'os2.', 'cgroupcpusetnodevself.md5sum\x00'}, &(0x7f0000000100)=""/186, 0xba) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000940)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) r8 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/self/attr/exec\x00', 0x2, 0x0) getpgrp(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000ec0)={0x7fffffff, 0x9, 0x100000001, 0x7}) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)="c35a49bf1924e7960bff2459d7f805b41e21beacaba43af3b4beb392b92d5c9d4b2fb73ad837a935b81eb3c9baefd90b692cd6e7eb5ae52a6aaaed0b4c6488cec10012ccf440", 0x46}], 0x1, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r8, r1, r1, r1]}], 0xd8, 0x48000}, 0x850) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) pipe2(&(0x7f0000000e80)={0xffffffffffffffff}, 0x4800) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000000f00)) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:53:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 11:53:18 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000002c0)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r5, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 11:53:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 11:53:19 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @remote, @mcast2, 0xfffffffffffffffe, 0x0, 0x0, 0x11b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 11:53:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 11:53:19 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000001b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @remote, @mcast2, 0xfffffffffffffffe, 0x0, 0x0, 0x11b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 11:53:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000a8cff0)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 11:53:19 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000002c0)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r5, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 11:53:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = gettid() clone(0x2040000003, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x8000000000000014) r2 = socket$inet6(0xa, 0x0, 0x3) sync() wait4(0x0, &(0x7f0000000180), 0x80000000, &(0x7f0000000280)) socket$inet6(0xa, 0x0, 0x7) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x1, 0x0, 0x6, 0xcf0f, 0x5, 0x563d}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x5, 0x2, 0x21}, 0x40}}, 0x18) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000002, 0x13, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'veth0_to_bond\x00'}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) pipe(&(0x7f0000000340)) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000440)="87bef7d33a4d3e7cb73bd04af757b0027143759d3dbbc44e67c09ac0f0c0f0afda1b6a7dbd9d20eb49e974e7582a5d11fd63ed99e1d393f6e93f322140e520189a8a49da4dc92cd084bac8351c4bc90886224a521150534af57142b46136436d12a3447d9b0e9ca21a4217658ad579098627bc6f8741481e30f0a6496ee685a66b3ae8be4538b446ca32024c15d71445623e269403ea22435d58d537cf696c56c52800fa96a1ed76f8e6d7269fb306dfa7001a012784be3ecadf1f1713ea4dee2fdf6d4934b3229c418236deedad538c33", 0xd1}], 0x1, 0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 11:53:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:53:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa347991907000000000000005e44573eef5fd0f423a5cfb386e4cc997c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e682e3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000e70da2fbe1595f24f3f202ebcb7774bb5dc9a4bdcc24ef5fe2d20b0012352c8536e5f07e7ccc9b973570123f8abef5118b2488a804b6fe27f839d17fa637636c6ba3b2b4fbfdd348f276c71576fbf514d52f72b29e83f07da15ec5da20d84d47907ca11c3c4944207ddcd90bcd238ab5391ebc7bee5562864794fa504ce1cc4eb26ff2040ef99dd2d4d29fd96ce9822c323db0cc4078f7d4de83e5bfc6b2f2543407f1bc4531acf7") clone(0x10044000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) pread64(r0, &(0x7f0000000fc0)=""/144, 0x4c, 0x0) pread64(r0, &(0x7f0000000080), 0xff7c, 0x0) 11:53:21 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000002c0)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r5, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 11:53:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fgetxattr(r0, &(0x7f00000000c0)=@random={'os2.', 'cgroupcpusetnodevself.md5sum\x00'}, &(0x7f0000000100)=""/186, 0xba) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000940)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) r8 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/self/attr/exec\x00', 0x2, 0x0) getpgrp(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000ec0)={0x7fffffff, 0x9, 0x100000001, 0x7}) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)="c35a49bf1924e7960bff2459d7f805b41e21beacaba43af3b4beb392b92d5c9d4b2fb73ad837a935b81eb3c9baefd90b692cd6e7eb5ae52a6aaaed0b4c6488cec10012ccf440", 0x46}], 0x1, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r8, r1, r1, r1]}], 0xd8, 0x48000}, 0x850) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) pipe2(&(0x7f0000000e80)={0xffffffffffffffff}, 0x4800) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000000f00)) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="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") clone(0x10044000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) pread64(r0, &(0x7f0000000fc0)=""/144, 0x4c, 0x0) pread64(r0, &(0x7f0000000080), 0xff7c, 0x0) 11:53:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa347991907000000000000005e44573eef5fd0f423a5cfb386e4cc997c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e682e3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000e70da2fbe1595f24f3f202ebcb7774bb5dc9a4bdcc24ef5fe2d20b0012352c8536e5f07e7ccc9b973570123f8abef5118b2488a804b6fe27f839d17fa637636c6ba3b2b4fbfdd348f276c71576fbf514d52f72b29e83f07da15ec5da20d84d47907ca11c3c4944207ddcd90bcd238ab5391ebc7bee5562864794fa504ce1cc4eb26ff2040ef99dd2d4d29fd96ce9822c323db0cc4078f7d4de83e5bfc6b2f2543407f1bc4531acf7") clone(0x10044000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) pread64(r0, &(0x7f0000000fc0)=""/144, 0x4c, 0x0) pread64(r0, &(0x7f0000000080), 0xff7c, 0x0) 11:53:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="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") clone(0x10044000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) pread64(r0, &(0x7f0000000fc0)=""/144, 0x4c, 0x0) pread64(r0, &(0x7f0000000080), 0xff7c, 0x0) 11:53:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') lseek(r0, 0x0, 0x1) 11:53:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 11:53:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x35, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000003c0)={{0x9d, @multicast2, 0x4e22, 0x4, 'fo\x00', 0x3, 0x5, 0x5b}, {@multicast2, 0x4e22, 0x49aafad5cc2a705, 0x9b, 0x9d8, 0x100}}, 0x44) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2001, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000440)=""/193) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0-', 0x2a, 0x0) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000002c0), &(0x7f0000000540)=0x4) fsetxattr(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="757365001000a2876bd1823a50a83b6ab5f2ba82498d15356181fc42f0c5e29d2aacd8f485bcc4539073729197e1b95af2acd72c86055f7327972f9470d55954cb5646ace1ac2ec7d33f426c01a6a468175ec3a99bae0d8ab8f9b5de028ee82a13c66ad07b93b54eb8fad90be21f209233fae65e2d0300239fb43bf97b8baedd8195ab210000000000000000"], &(0x7f0000000280)='keyring\x00', 0x8, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r6) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) shutdown(r4, 0x0) shutdown(r4, 0x1) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000001700)}}], 0x1, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/159) 11:53:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) [ 2183.004389] audit: type=1401 audit(1542801202.153:545): op=setxattr invalid_context="system_u:object_r:netlabel_mgmt_exec_t:s0-" 11:53:24 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fgetxattr(r0, &(0x7f00000000c0)=@random={'os2.', 'cgroupcpusetnodevself.md5sum\x00'}, &(0x7f0000000100)=""/186, 0xba) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000940)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) r8 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/self/attr/exec\x00', 0x2, 0x0) getpgrp(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000ec0)={0x7fffffff, 0x9, 0x100000001, 0x7}) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)="c35a49bf1924e7960bff2459d7f805b41e21beacaba43af3b4beb392b92d5c9d4b2fb73ad837a935b81eb3c9baefd90b692cd6e7eb5ae52a6aaaed0b4c6488cec10012ccf440", 0x46}], 0x1, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r8, r1, r1, r1]}], 0xd8, 0x48000}, 0x850) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) pipe2(&(0x7f0000000e80)={0xffffffffffffffff}, 0x4800) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000000f00)) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 11:53:24 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000002c0)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r5, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r5) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 11:53:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x35, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000003c0)={{0x9d, @multicast2, 0x4e22, 0x4, 'fo\x00', 0x3, 0x5, 0x5b}, {@multicast2, 0x4e22, 0x49aafad5cc2a705, 0x9b, 0x9d8, 0x100}}, 0x44) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2001, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000440)=""/193) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0-', 0x2a, 0x0) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000002c0), &(0x7f0000000540)=0x4) fsetxattr(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="757365001000a2876bd1823a50a83b6ab5f2ba82498d15356181fc42f0c5e29d2aacd8f485bcc4539073729197e1b95af2acd72c86055f7327972f9470d55954cb5646ace1ac2ec7d33f426c01a6a468175ec3a99bae0d8ab8f9b5de028ee82a13c66ad07b93b54eb8fad90be21f209233fae65e2d0300239fb43bf97b8baedd8195ab210000000000000000"], &(0x7f0000000280)='keyring\x00', 0x8, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r6) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) shutdown(r4, 0x0) shutdown(r4, 0x1) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000001700)}}], 0x1, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/159) 11:53:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:53:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 11:53:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4002) mmap(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}) 11:53:25 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600", 0x0) fchmod(r0, 0xc5cb1867d567cec6) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000140)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000200), 0x20) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 11:53:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4002) mmap(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}) 11:53:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x35, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000003c0)={{0x9d, @multicast2, 0x4e22, 0x4, 'fo\x00', 0x3, 0x5, 0x5b}, {@multicast2, 0x4e22, 0x49aafad5cc2a705, 0x9b, 0x9d8, 0x100}}, 0x44) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2001, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000440)=""/193) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0-', 0x2a, 0x0) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000002c0), &(0x7f0000000540)=0x4) fsetxattr(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="757365001000a2876bd1823a50a83b6ab5f2ba82498d15356181fc42f0c5e29d2aacd8f485bcc4539073729197e1b95af2acd72c86055f7327972f9470d55954cb5646ace1ac2ec7d33f426c01a6a468175ec3a99bae0d8ab8f9b5de028ee82a13c66ad07b93b54eb8fad90be21f209233fae65e2d0300239fb43bf97b8baedd8195ab210000000000000000"], &(0x7f0000000280)='keyring\x00', 0x8, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r6) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) shutdown(r4, 0x0) shutdown(r4, 0x1) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000001700)}}], 0x1, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/159) 11:53:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4002) mmap(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}) [ 2185.884523] audit: type=1401 audit(1542801205.033:546): op=setxattr invalid_context="system_u:object_r:netlabel_mgmt_exec_t:s0-" 11:53:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x4002) mmap(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}) [ 2186.026542] audit: type=1401 audit(1542801205.173:547): op=setxattr invalid_context="system_u:object_r:netlabel_mgmt_exec_t:s0-" 11:53:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fgetxattr(r0, &(0x7f00000000c0)=@random={'os2.', 'cgroupcpusetnodevself.md5sum\x00'}, &(0x7f0000000100)=""/186, 0xba) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000940)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) r8 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/self/attr/exec\x00', 0x2, 0x0) getpgrp(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000ec0)={0x7fffffff, 0x9, 0x100000001, 0x7}) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)="c35a49bf1924e7960bff2459d7f805b41e21beacaba43af3b4beb392b92d5c9d4b2fb73ad837a935b81eb3c9baefd90b692cd6e7eb5ae52a6aaaed0b4c6488cec10012ccf440", 0x46}], 0x1, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r8, r1, r1, r1]}], 0xd8, 0x48000}, 0x850) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) pipe2(&(0x7f0000000e80)={0xffffffffffffffff}, 0x4800) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000000f00)) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 11:53:25 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600", 0x0) fchmod(r0, 0xc5cb1867d567cec6) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000140)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000200), 0x20) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 11:53:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000400)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 11:53:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='auxv\x00') exit(0x0) lseek(r0, 0xd, 0x0) 11:53:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x35, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000003c0)={{0x9d, @multicast2, 0x4e22, 0x4, 'fo\x00', 0x3, 0x5, 0x5b}, {@multicast2, 0x4e22, 0x49aafad5cc2a705, 0x9b, 0x9d8, 0x100}}, 0x44) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2001, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000440)=""/193) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0-', 0x2a, 0x0) r4 = socket(0x2, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000002c0), &(0x7f0000000540)=0x4) fsetxattr(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="757365001000a2876bd1823a50a83b6ab5f2ba82498d15356181fc42f0c5e29d2aacd8f485bcc4539073729197e1b95af2acd72c86055f7327972f9470d55954cb5646ace1ac2ec7d33f426c01a6a468175ec3a99bae0d8ab8f9b5de028ee82a13c66ad07b93b54eb8fad90be21f209233fae65e2d0300239fb43bf97b8baedd8195ab210000000000000000"], &(0x7f0000000280)='keyring\x00', 0x8, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r6) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) shutdown(r4, 0x0) shutdown(r4, 0x1) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000001700)}}], 0x1, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/159) 11:53:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:53:25 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x1f}, &(0x7f00000001c0)) timer_settime(0x0, 0x100000001, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 11:53:26 executing program 1: io_setup(0x7, &(0x7f00000012c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r0, 0x200002, 0x7ffffffffffff57, 0xfffffffffffffffd, &(0x7f0000000080)={0x0, r1+30000000}) r2 = memfd_create(&(0x7f0000000000)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)}]) 11:53:26 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600", 0x0) fchmod(r0, 0xc5cb1867d567cec6) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000140)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000200), 0x20) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 2186.810520] audit: type=1401 audit(1542801205.953:548): op=setxattr invalid_context="system_u:object_r:netlabel_mgmt_exec_t:s0-" 11:53:26 executing program 4: rt_sigaction(0x2b, 0x0, &(0x7f0000000600)={&(0x7f0000000000)="01f0d00afe30d2a3005566470fc6dc07005579058fe830875daf2dc4a16e59942d91300000263e66660f38257900c481f557d2f3446fc4a259ac45fe", {}, 0x0, &(0x7f00000005c0)="c4e141db616b42de39c46135685b6ff30f52b0ab1ef7e426660f38156baf2e67420f1854b5d2f3dbecc462b2f57f07f30f11423e8fa858cc2a76"}, 0x8, &(0x7f0000000640)) 11:53:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)="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") 11:53:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x200000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 11:53:26 executing program 4: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000400)) 11:53:26 executing program 1: io_setup(0x7, &(0x7f00000012c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r0, 0x200002, 0x7ffffffffffff57, 0xfffffffffffffffd, &(0x7f0000000080)={0x0, r1+30000000}) r2 = memfd_create(&(0x7f0000000000)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)}]) 11:53:26 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600", 0x0) fchmod(r0, 0xc5cb1867d567cec6) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000140)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000200), 0x20) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 11:53:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/file1/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0/file1\x00') 11:53:26 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:53:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000014, 0x0, "e1d3f877e5eae453e55d7d64d10da8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc8f5c8ba93c00", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c995470fbeeefd937d72d7bbec8e409ce1bbb3ce7f86d3235b95fbaae7b20357961eb14950b0b19fd1b75337d5584d856aac66da07d4396ef92a7c5479dceb00", "1b39b76ed0db08b243f5ad1cc880a28b1efac95fcb3f774afa37efd772912cfb21a5c24f5a1dbb86eaeba6ec187227ee3ba65dd241ee40cc8eb69e069972f8b8", "e26bfa4445bbe586232643912ccc388dad2fe91aceefb9c6735a5fdc8535fd9f"}) 11:53:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000430007031dfffd946fa2830020200a00090003040a1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 11:53:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x2000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) 11:53:27 executing program 5: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'vcan0\x00', @dev={[], 0x1f}}) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1e20) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x89f7, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @tcp_ip6_spec={@empty, @remote}, {'7B', @dev}, @hdata="af35e0012c52b2e65293b9a39f4b5c06c321ead62c6f11c9e3272786ac48499594c0580d58419a3774a2bee899be847153803e76", {"03ea", @random="0427d1ddbe0b"}}}}) 11:53:27 executing program 1: io_setup(0x7, &(0x7f00000012c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r0, 0x200002, 0x7ffffffffffff57, 0xfffffffffffffffd, &(0x7f0000000080)={0x0, r1+30000000}) r2 = memfd_create(&(0x7f0000000000)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)}]) 11:53:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x0, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3}}) 11:53:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21}, 0x1c) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) [ 2187.856043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 11:53:27 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) pselect6(0x55, &(0x7f0000000040), &(0x7f0000000000)={0x4000000000000000}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000ff8)={&(0x7f0000000ff8)={0x409}, 0x8}) 11:53:27 executing program 4: r0 = timerfd_create(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace(0x18, r1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000600)="80", 0x1}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) 11:53:27 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) syz_open_pts(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000005440)={'bcsh0\x00'}) getsockopt(r2, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) flock(r1, 0x8) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b}}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003a80)=""/3, 0x3}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x7, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={0x0, r3+30000000}) recvfrom(r2, &(0x7f0000005200)=""/101, 0x65, 0x10000, &(0x7f0000005280)=@ax25={0x3, {"5f1b4f9eb63234"}, 0x100000000}, 0x80) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004cc0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000005100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10002200}, 0xc, &(0x7f00000050c0)={&(0x7f0000005040)={0x80, r7, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5a66}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x80}}, 0x2000c800) write$FUSE_ENTRY(r0, &(0x7f0000005380)={0x90, 0x0, 0x5, {0x3, 0x3, 0x6, 0x10000, 0x3ff, 0x5, {0x5, 0x9, 0xccb8, 0x1c3ccf7f, 0x1ed7, 0x0, 0x9, 0x4, 0x9, 0x5, 0x6, r4, r5, 0x9, 0x3}}}, 0x90) connect(r2, &(0x7f00000012c0)=@nl=@unspec, 0x80) 11:53:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 11:53:27 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 11:53:27 executing program 1: io_setup(0x7, &(0x7f00000012c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r0, 0x200002, 0x7ffffffffffff57, 0xfffffffffffffffd, &(0x7f0000000080)={0x0, r1+30000000}) r2 = memfd_create(&(0x7f0000000000)=':+lo#\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)}]) 11:53:27 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000001a40)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) lsetxattr$security_selinux(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x0) 11:53:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:53:27 executing program 4: r0 = socket$packet(0x11, 0x80000000003, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:53:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/214, 0xd6}], 0x1) sendto$inet(r0, &(0x7f0000000200)="c340", 0x2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000001400)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() recvfrom$inet(r0, &(0x7f0000004b80)=""/4096, 0xffffffffffffff76, 0x0, 0x0, 0x0) tkill(r1, 0x14) [ 2188.195123] audit: type=1400 audit(1542801207.343:549): avc: denied { create } for pid=23929 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2188.211883] audit: type=1400 audit(1542801207.343:550): avc: denied { associate } for pid=23963 comm="syz-executor3" name="bus" dev="sysfs" ino=8 scontext=system_u:object_r:dmesg_exec_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=0 [ 2188.216871] audit: type=1400 audit(1542801207.343:551): avc: denied { associate } for pid=23963 comm="syz-executor3" name="bus" dev="sysfs" ino=8 scontext=system_u:object_r:dmesg_exec_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=0 11:53:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000080)={{}, 'syz0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x12a) fsync(r5) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000280)="40347b55b44b684a88d0f1ac7a376bf26ee9f74b26c15eacf1037b413b87b567f4daf52fb6e8f8aa673d30c030281bfb345222224cfc743475f0b5e850607ac0d125b5db60549b7b636c118d0fb788b12513fcb09cb4e97303e288edc456f973862c68508cae6fbbaa1f52cb43d825dd72b2fa8f881a9b90df61ab9eb8b8") ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) pivot_root(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00') ioctl$VT_DISALLOCATE(r3, 0x5608) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={0x80, {0x2, 0x4e24, @rand_addr}, {0x2, 0x0, @local}, {0x2, 0x0, @local}, 0x8, 0x2, 0x80000000, 0x0, 0x100000001, &(0x7f0000000880)='nr0\x00', 0xffffffffffffff5d, 0x9}) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000500)=""/123, 0x3}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0x3, 0x3, 0x9, 0x3}}) 11:53:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x22, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 11:53:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrusage(0x0, &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000240)) 11:53:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 2188.871466] audit: type=1400 audit(1542801208.013:552): avc: denied { create } for pid=23929 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 2188.925661] ================================================================== [ 2188.933039] BUG: KASAN: use-after-free in tcp_write_xmit+0x3b22/0x4680 [ 2188.939725] Read of size 2 at addr ffff880086f01430 by task syz-executor5/23944 [ 2188.947173] [ 2188.948811] CPU: 0 PID: 23944 Comm: syz-executor5 Not tainted 4.4.164+ #123 [ 2188.955897] 0000000000000000 092bc7d4d6d16709 ffff8801db6074e0 ffffffff81aa5d4d [ 2188.963955] ffffea00021bc000 ffff880086f01430 0000000000000000 ffff880086f01430 [ 2188.972005] dffffc0000000000 ffff8801db607518 ffffffff8148b2eb ffff880086f01430 [ 2188.980548] Call Trace: [ 2188.983118] [] dump_stack+0xc1/0x124 [ 2188.989233] [] print_address_description+0x6c/0x217 [ 2188.995904] [] kasan_report.cold.6+0x175/0x2f7 [ 2189.002129] [] ? tcp_write_xmit+0x3b22/0x4680 [ 2189.008277] [] __asan_report_load2_noabort+0x14/0x20 [ 2189.015025] [] tcp_write_xmit+0x3b22/0x4680 [ 2189.020985] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.027931] [] ? tcp_rcv_space_adjust+0x450/0x450 [ 2189.034425] [] __tcp_push_pending_frames+0xa4/0x2a0 [ 2189.041082] [] tcp_rcv_state_process+0xb02/0x4180 [ 2189.047562] [] ? tcp_finish_connect+0x470/0x470 [ 2189.053871] [] ? sk_filter_trim_cap+0xf1/0x6a0 [ 2189.060096] [] ? tcp_v4_rcv+0x220b/0x3750 [ 2189.065880] [] ? __inet_lookup_established+0xa7/0x590 [ 2189.072708] [] tcp_v4_do_rcv+0x1a5/0x7a0 [ 2189.078571] [] tcp_v4_rcv+0x2a84/0x3750 [ 2189.084183] [] ip_local_deliver_finish+0x3c0/0xa70 [ 2189.090749] [] ? ip_local_deliver_finish+0x12a/0xa70 [ 2189.097560] [] ip_local_deliver+0x1ac/0x390 [ 2189.103537] [] ? ip_call_ra_chain+0x540/0x540 [ 2189.109667] [] ? nf_hook_slow+0x1db/0x340 [ 2189.115450] [] ? inet_del_offload+0x40/0x40 [ 2189.121410] [] ? nf_hook_slow+0x202/0x340 [ 2189.127195] [] ? nf_iterate+0x210/0x210 [ 2189.132814] [] ip_rcv_finish+0x759/0x1220 [ 2189.138600] [] ip_rcv+0x899/0xfc0 [ 2189.143698] [] ? ip_local_deliver+0x390/0x390 [ 2189.149831] [] ? ip_local_deliver_finish+0xa70/0xa70 [ 2189.156570] [] ? ip_local_deliver+0x390/0x390 [ 2189.162710] [] __netif_receive_skb_core+0x12c8/0x2820 [ 2189.169546] [] ? dev_loopback_xmit+0x420/0x420 [ 2189.175770] [] ? check_preemption_disabled+0x3b/0x200 [ 2189.183024] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.189772] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.196539] [] __netif_receive_skb+0x5b/0x1c0 [ 2189.202690] [] process_backlog+0x20a/0x670 [ 2189.208567] [] ? process_backlog+0x1a6/0x670 [ 2189.214617] [] net_rx_action+0x367/0xd50 [ 2189.220363] [] ? net_rps_action_and_irq_enable.isra.29+0x170/0x170 [ 2189.228432] [] ? check_preemption_disabled+0x3b/0x200 [ 2189.235722] [] __do_softirq+0x22a/0xa3e [ 2189.241364] [] ? release_sock+0x3b6/0x500 [ 2189.247168] [] do_softirq_own_stack+0x1c/0x30 [ 2189.253294] [] do_softirq.part.2+0x54/0x60 [ 2189.259952] [] __local_bh_enable_ip+0xd4/0xe0 [ 2189.266094] [] _raw_spin_unlock_bh+0x30/0x40 [ 2189.272165] [] release_sock+0x3b6/0x500 [ 2189.277784] [] __inet_stream_connect+0x5aa/0xc30 [ 2189.284647] [] ? inet_bind+0x8a0/0x8a0 [ 2189.290175] [] ? autoremove_wake_function.part.1+0x130/0x130 [ 2189.297609] [] ? kmem_cache_alloc_trace+0x117/0x2d0 [ 2189.304291] [] tcp_sendmsg+0x1a07/0x2b30 [ 2189.309991] [] ? trace_hardirqs_on+0x10/0x10 [ 2189.316038] [] ? tcp_sendpage+0x17e0/0x17e0 [ 2189.322009] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 2189.329540] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.336760] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.343521] [] ? check_preemption_disabled+0x3b/0x200 [ 2189.350846] [] ? inet_sendmsg+0x143/0x4d0 [ 2189.356634] [] inet_sendmsg+0x203/0x4d0 [ 2189.362242] [] ? inet_sendmsg+0x73/0x4d0 [ 2189.367969] [] ? inet_recvmsg+0x4c0/0x4c0 [ 2189.373755] [] sock_sendmsg+0xbb/0x110 [ 2189.379296] [] SyS_sendto+0x220/0x370 [ 2189.384729] [] ? SyS_getpeername+0x2d0/0x2d0 [ 2189.390775] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.397522] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2189.404261] [] ? __might_fault+0x114/0x1d0 [ 2189.410131] [] ? __might_fault+0x18e/0x1d0 [ 2189.415998] [] ? __might_fault+0xe4/0x1d0 [ 2189.421780] [] ? SyS_clock_gettime+0x11e/0x1e0 [ 2189.428000] [] ? SyS_clock_settime+0x210/0x210 [ 2189.434223] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 2189.440717] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2189.447292] [ 2189.449146] Allocated by task 23930: [ 2189.452854] [] save_stack_trace+0x26/0x50 [ 2189.458770] [] kasan_kmalloc.part.1+0x62/0xf0 [ 2189.465084] [] kasan_kmalloc+0xaf/0xc0 [ 2189.470730] [] kasan_slab_alloc+0x12/0x20 [ 2189.476640] [] kmem_cache_alloc+0xdc/0x2c0 [ 2189.482636] [] __alloc_skb+0xe6/0x5b0 [ 2189.488197] [] sk_stream_alloc_skb+0xa3/0x5d0 [ 2189.494483] [] tcp_sendmsg+0xf81/0x2b30 [ 2189.500654] [] inet_sendmsg+0x203/0x4d0 [ 2189.506391] [] sock_sendmsg+0xbb/0x110 [ 2189.512071] [] SyS_sendto+0x220/0x370 [ 2189.517636] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2189.524371] [ 2189.525983] Freed by task 23944: [ 2189.529359] [] save_stack_trace+0x26/0x50 [ 2189.535299] [] kasan_slab_free+0xac/0x190 [ 2189.541233] [] kmem_cache_free+0xbe/0x350 [ 2189.547166] [] kfree_skbmem+0xcf/0x100 [ 2189.553294] [] __kfree_skb+0x1d/0x20 [ 2189.558799] [] tcp_connect+0xae9/0x3110 [ 2189.564555] [] tcp_v4_connect+0xf31/0x1890 [ 2189.570568] [] __inet_stream_connect+0x2a9/0xc30 [ 2189.577087] [] tcp_sendmsg+0x1a07/0x2b30 [ 2189.582932] [] inet_sendmsg+0x203/0x4d0 [ 2189.588688] [] sock_sendmsg+0xbb/0x110 [ 2189.594365] [] SyS_sendto+0x220/0x370 [ 2189.599943] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 2189.607059] [ 2189.608699] The buggy address belongs to the object at ffff880086f01400 [ 2189.608699] which belongs to the cache skbuff_fclone_cache of size 456 [ 2189.622039] The buggy address is located 48 bytes inside of [ 2189.622039] 456-byte region [ffff880086f01400, ffff880086f015c8) [ 2189.633845] The buggy address belongs to the page: [ 2189.642805] kasan: CONFIG_KASAN_INLINE enabled [ 2189.647257] kasan: GPF could be caused by NULL-ptr deref or user memory accessSeaBIOS (version 1.8.2-20181014_101610-google) Total RAM Size = 0x00000001e0000000 = 7680 MiB CPUs found: 2 Max CPUs supported: 2 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2a10: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Booting from Hard Disk 0... [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 4.4.164+ (syzkaller@ci) (gcc version 8.0.1 20180413 (experimental) (GCC) ) #123 SMP PREEMPT Wed Nov 21 10:53:23 UTC 2018 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x04: 'AVX registers' [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000021fffffff] usable [ 0.000000] bootconsole [earlyser0] enabled [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] Hypervisor detected: KVM [ 0.000000] Kernel/User page tables isolation: disabled [ 0.000000] e820: last_pfn = 0x220000 max_arch_pfn = 0x400000000 [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC UC UC UC UC [ 0.000000] e820: last_pfn = 0xbfffd max_arch_pfn = 0x400000000 [ 0.000000] found SMP MP-table at [mem 0x000f2c80-0x000f2c8f] mapped at [ffff8800000f2c80] [ 0.000000] Using GB pages for direct mapping [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000F2A50 000014 (v00 Google) [ 0.000000] ACPI: RSDT 0x00000000BFFFDBA0 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACP 0x00000000BFFFFF00 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000] ACPI: DSDT 0x00000000BFFFDBE0 0017B2 (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: FACS 0x00000000BFFFFEC0 000040 [ 0.000000] ACPI: SSDT 0x00000000BFFFF590 000930 (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.000000] ACPI: APIC 0x00000000BFFFF4A0 000076 (v01 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000] ACPI: WAET 0x00000000BFFFF470 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.000000] ACPI: SRAT 0x00000000BFFFF3A0 0000C8 (v01 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 2:1fffd001, primary cpu clock [ 0.000000] kvm-clock: using sched offset of 1620911361 cycles [ 0.000000] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000000] Zone ranges: [ 0.000000] DMA32 [mem 0x0000000000001000-0x00000000ffffffff] [ 0.000000] Normal [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000bfffcfff] [ 0.000000] node 0: [mem 0x0000000100000000-0x000000021fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000021fffffff] [ 0.000000] kasan: KernelAddressSanitizer initialized [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.000000] e820: [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.000000] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:2 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 41 pages/cpu @ffff8801db600000 s130696 r8192 d29048 u1048576 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 1935238 [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native rodata=n oops=panic panic_on_warn=1 nmi_watchdog=panic panic=86400 workqueue.watchdog_thresh=140 nopti [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes) [ 0.000000] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.000000] Memory: 6609228K/7863916K available (23651K kernel code, 3775K rwdata, 5016K rodata, 1300K init, 23352K bss, 1254688K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Running RCU self tests [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] RCU lockdep checking is enabled. [ 0.000000] Build-time adjustment of leaf fanout to 64. [ 0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2 [ 0.000000] NR_IRQS:4352 nr_irqs:440 16 [ 0.000000] console [ttyS0] enabled [ 0.000000] console [ttyS0] enabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] bootconsole [earlyser0] disabled [ 0.000000] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.000000] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.000000] ... MAX_LOCK_DEPTH: 48 [ 0.000000] ... MAX_LOCKDEP_KEYS: 8191 [ 0.000000] ... CLASSHASH_SIZE: 4096 [ 0.000000] ... MAX_LOCKDEP_ENTRIES: 32768 [ 0.000000] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.000000] ... CHAINHASH_SIZE: 32768 [ 0.000000] memory used by lock dependency info: 8159 kB [ 0.000000] per task-struct memory footprint: 1920 bytes [ 0.000000] tsc: Detected 2300.000 MHz processor [ 1.095391] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 1.096828] pid_max: default: 32768 minimum: 301 [ 1.097624] ACPI: Core revision 20150930 [ 1.166220] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.167452] Security Framework initialized [ 1.168102] SELinux: Initializing. [ 1.168987] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.170201] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes) [ 1.173925] Initializing cgroup subsys freezer [ 1.174940] CPU: Physical Processor ID: 0 [ 1.175597] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 1.176485] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 1.177483] Spectre V2 : Mitigation: Full generic retpoline [ 1.178391] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 1.179698] Speculative Store Bypass: Vulnerable [ 1.180954] Freeing SMP alternatives memory: 28K [ 1.191298] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 1.304613] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 1.306363] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 1.394853] x86: Booting SMP configuration: [ 1.395471] .... node #0, CPUs: #1 [ 1.396600] kvm-clock: cpu 1, msr 2:1fffd041, secondary cpu clock [ 1.400370] x86: Booted up 1 node, 2 CPUs [ 1.401274] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 1.403776] CPU1: update max cpu_capacity 1024 [ 1.404720] CPU1: update max cpu_capacity 1024 [ 1.407585] devtmpfs: initialized [ 1.415678] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.417345] futex hash table entries: 512 (order: 4, 65536 bytes) [ 1.421539] NET: Registered protocol family 16 [ 1.444766] cpuidle: using governor ladder [ 1.474652] cpuidle: using governor menu [ 1.475697] ACPI: bus type PCI registered [ 1.476576] PCI: Using configuration type 1 for base access [ 1.549147] ACPI: Added _OSI(Module Device) [ 1.549984] ACPI: Added _OSI(Processor Device) [ 1.550856] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.551686] ACPI: Added _OSI(Processor Aggregator Device) [ 1.563044] ACPI: Executed 2 blocks of module-level executable AML code [ 1.643023] ACPI: Interpreter enabled [ 1.644054] ACPI: (supports S0 S3 S5) [ 1.644628] ACPI: Using IOAPIC for interrupt routing [ 1.645732] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 1.846232] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 1.847346] acpi PNP0A03:00: _OSC: OS supports [Segments MSI] [ 1.849074] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 1.861825] PCI host bridge to bus 0000:00 [ 1.862597] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 1.863728] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 1.864700] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 1.866192] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 1.867659] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.915303] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 1.997206] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 2.003683] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 2.009731] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 2.015694] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 2.019797] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 2.032910] ACPI: Enabled 16 GPEs in block 00 to 0F [ 2.036489] vgaarb: loaded [ 2.039393] SCSI subsystem initialized [ 2.041499] ACPI: bus type USB registered [ 2.042667] usbcore: registered new interface driver usbfs [ 2.043894] usbcore: registered new interface driver hub [ 2.045036] usbcore: registered new device driver usb [ 2.047058] Advanced Linux Sound Architecture Driver Initialized. [ 2.048310] PCI: Using ACPI for IRQ routing [ 2.052942] amd_nb: Cannot enumerate AMD northbridges [ 2.053941] clocksource: Switched to clocksource kvm-clock [ 2.152858] pnp: PnP ACPI init [ 2.175172] pnp: PnP ACPI: found 7 devices [ 2.186043] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 2.188225] NET: Registered protocol family 2 [ 2.191741] TCP established hash table entries: 65536 (order: 7, 524288 bytes) [ 2.193606] TCP bind hash table entries: 65536 (order: 10, 4194304 bytes) [ 2.198975] TCP: Hash tables configured (established 65536 bind 65536) [ 2.200208] UDP hash table entries: 4096 (order: 7, 655360 bytes) [ 2.202238] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes) [ 2.204251] NET: Registered protocol family 1 [ 2.205088] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 2.207363] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 2.208326] software IO TLB [mem 0xbbffd000-0xbfffd000] (64MB) mapped at [ffff8800bbffd000-ffff8800bfffcfff] [ 2.210203] RAPL PMU detected, API unit is 2^-32 Joules, 3 fixed counters 10737418240 ms ovfl timer [ 2.212758] hw unit of domain pp0-core 2^-0 Joules [ 2.213497] hw unit of domain package 2^-0 Joules [ 2.214206] hw unit of domain dram 2^-16 Joules [ 2.219390] audit: initializing netlink subsys (disabled) [ 2.220426] audit: type=2000 audit(1542801213.214:1): initialized [ 2.307910] VFS: Disk quotas dquot_6.6.0 [ 2.309490] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.322875] Registering sdcardfs 0.1 [ 2.327452] fuse init (API version 7.23) [ 2.345886] cryptomgr_test (31) used greatest stack depth: 28656 bytes left [ 2.358164] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253) [ 2.359460] io scheduler noop registered [ 2.360114] io scheduler deadline registered [ 2.362314] io scheduler cfq registered (default) [ 2.369374] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 2.370662] ACPI: Power Button [PWRF] [ 2.372566] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 2.373851] ACPI: Sleep Button [SLPF] [ 2.374966] Warning: Processor Platform Limit event detected, but not handled. [ 2.376181] Consider compiling CPUfreq support into your kernel. [ 2.400006] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 2.401256] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 2.423385] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 2.425019] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 2.430643] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 2.453894] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 2.480103] 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 2.505148] 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A [ 2.530443] 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A [ 2.590248] brd: module loaded [ 2.623452] loop: module loaded [ 2.638487] scsi host0: Virtio SCSI HBA [ 2.651202] scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 [ 3.125012] sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) [ 3.125185] tun: Universal TUN/TAP device driver, 1.6 [ 3.125187] tun: (C) 1999-2004 Max Krasnyansky [ 3.129678] sd 0:0:1:0: [sda] 4096-byte physical blocks [ 3.136324] sd 0:0:1:0: [sda] Write Protect is off [ 3.141625] sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 3.158460] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI [ 3.160628] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 3.163240] PPP generic driver version 2.4.2 [ 3.165777] sda: sda1 [ 3.166972] PPP BSD Compression module registered [ 3.168307] PPP Deflate Compression module registered [ 3.169787] PPP MPPE Compression module registered [ 3.171074] NET: Registered protocol family 24 [ 3.172949] usbcore: registered new interface driver asix [ 3.175570] usbcore: registered new interface driver ax88179_178a [ 3.177382] usbcore: registered new interface driver cdc_ether [ 3.179353] usbcore: registered new interface driver net1080 [ 3.180925] usbcore: registered new interface driver cdc_subset [ 3.182815] usbcore: registered new interface driver zaurus [ 3.182969] sd 0:0:1:0: [sda] Attached SCSI disk [ 3.185374] usbcore: registered new interface driver cdc_ncm [ 3.186649] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.188239] ehci-pci: EHCI PCI platform driver [ 3.190428] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 3.193515] i8042: Warning: Keylock active [ 3.195872] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 3.197722] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 3.201157] mousedev: PS/2 mouse device common for all mice [ 3.204233] tsc: Refined TSC clocksource calibration: 2300.006 MHz [ 3.205318] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x21273ac4d85, max_idle_ns: 440795266965 ns [ 3.209044] usbcore: registered new interface driver xpad [ 3.210276] usbcore: registered new interface driver usb_acecad [ 3.211719] usbcore: registered new interface driver aiptek [ 3.213219] usbcore: registered new interface driver gtco [ 3.214697] usbcore: registered new interface driver hanwang [ 3.216196] usbcore: registered new interface driver kbtab [ 3.219110] rtc_cmos 00:00: RTC can wake from S4 [ 3.222008] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 3.223672] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram [ 3.228257] device-mapper: uevent: version 1.0.3 [ 3.232851] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com [ 3.236044] hidraw: raw HID events driver (C) Jiri Kosina [ 3.250389] usbcore: registered new interface driver usbhid [ 3.251556] usbhid: USB HID core driver [ 3.260961] ashmem: initialized [ 3.282529] u32 classifier [ 3.283374] Actions configured [ 3.284252] Netfilter messages via NETLINK v0.30. [ 3.285631] nf_conntrack version 0.5.0 (65536 buckets, 262144 max) [ 3.290810] ctnetlink v0.93: registering with nfnetlink. [ 3.297728] xt_time: kernel timezone is -0000 [ 3.299021] IPv4 over IPsec tunneling driver [ 3.303573] ip_tables: (C) 2000-2006 Netfilter Core Team [ 3.306063] arp_tables: (C) 2002 David S. Miller [ 3.307624] Initializing XFRM netlink socket [ 3.314830] NET: Registered protocol family 10 [ 3.322649] mip6: Mobile IPv6 [ 3.323586] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 3.329077] sit: IPv6 over IPv4 tunneling driver [ 3.337052] NET: Registered protocol family 17 [ 3.338084] NET: Registered protocol family 15 [ 3.342522] registered taskstats version 1 [ 3.346836] rtc_cmos 00:00: setting system clock to 2018-11-21 11:53:34 UTC (1542801214) [ 3.348679] ALSA device list: [ 3.349581] No soundcards found. [ 3.406904] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2 [ 3.414414] EXT4-fs (sda1): couldn't mount as ext3 due to feature incompatibilities [ 3.417241] EXT4-fs (sda1): couldn't mount as ext2 due to feature incompatibilities [ 3.435131] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null) [ 3.436390] VFS: Mounted root (ext4 filesystem) readonly on device 8:1. [ 3.453264] devtmpfs: mounted [ 3.458769] Freeing unused kernel memory: 1300K [ 3.459680] Kernel memory protection disabled. [ 4.433757] SELinux: Permission module_load in class system not defined in policy. [ 4.435278] SELinux: Class netlink_iscsi_socket not defined in policy. [ 4.436284] SELinux: Class netlink_fib_lookup_socket not defined in policy. [ 4.437458] SELinux: Class netlink_connector_socket not defined in policy. [ 4.438577] SELinux: Class netlink_netfilter_socket not defined in policy. [ 4.439860] SELinux: Class netlink_generic_socket not defined in policy. [ 4.441072] SELinux: Class netlink_scsitransport_socket not defined in policy. [ 4.442552] SELinux: Class netlink_rdma_socket not defined in policy. [ 4.443803] SELinux: Class netlink_crypto_socket not defined in policy. [ 4.444909] SELinux: Permission wake_alarm in class capability2 not defined in policy. [ 4.446527] SELinux: Permission block_suspend in class capability2 not defined in policy. [ 4.447910] SELinux: Permission audit_read in class capability2 not defined in policy. [ 4.449153] SELinux: Permission attach_queue in class tun_socket not defined in policy. [ 4.450482] SELinux: Class binder not defined in policy. [ 4.451314] SELinux: the above unknown classes and permissions will be denied [ 4.553280] audit: type=1403 audit(1542801215.690:2): policy loaded auid=4294967295 ses=4294967295 INIT: version 2.88 booting [ 4.714365] stty (357) used greatest stack depth: 26112 bytes left [info] Using makefile-style concurrent boot in runlevel S. [ 5.688536] audit: type=1400 audit(1542801216.830:3): avc: denied { associate } for pid=461 comm="restorecon" name="pts" dev="devtmpfs" ino=479 scontext=system_u:object_r:devpts_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [....] Starting the hotplug events dispatcher: udevd[ 5.741128] udevd[469]: starting version 175 [?25l[?1c7[ ok 8[?25h[?0c. [....] Synthesizing the initial hotplug events...[?25l[?1c7[ ok 8[?25h[?0cdone. [....] Waiting for /dev to be fully populated...[ 6.385277] pci-db (580) used greatest stack depth: 25728 bytes left