Starting mcstransd: [ 9.259568] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.177614] random: sshd: uninitialized urandom read (32 bytes read) [ 30.702395] random: sshd: uninitialized urandom read (32 bytes read) [ 30.877203] random: crng init done Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2018/12/06 20:47:35 fuzzer started 2018/12/06 20:47:37 dialing manager at 10.128.0.26:33359 2018/12/06 20:47:37 syscalls: 1 2018/12/06 20:47:37 code coverage: enabled 2018/12/06 20:47:37 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/06 20:47:37 setuid sandbox: enabled 2018/12/06 20:47:37 namespace sandbox: enabled 2018/12/06 20:47:37 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/06 20:47:37 fault injection: kernel does not have systematic fault injection support 2018/12/06 20:47:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/06 20:47:37 net packet injection: enabled 2018/12/06 20:47:37 net device setup: enabled 20:48:21 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x9) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x7, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_to_team\x00', 0x10) prctl$PR_GET_DUMPABLE(0x3) ioctl$TCGETS(r0, 0x5401, &(0x7f00000001c0)) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="cb5030290645c948a223f19759a9240fd2cefe10066671ff818db1edc0b6a8d98422e613141799fc128a44a4d19964c57a4972fbb3b88d28a7d1ed58a2abda151d94bf567cd70f980c7a3d6a4764f23a60764f3e89744b212e7d2208cc39620001c00e6470742d83a11d359b2f46d78d6ac0320f2376df7b0e53fc6056a62aa6c897a5aa46077994046ba0aa07162dbdad5cc1d597f96cd7a335b1a1b6e35b2c721ddc78382d5473cadbc61fa50322ee08b5ac8dff7844945e5d21729b7cb91d2ca9a53df2d3cf7cf89da033d9b0879ed5dddd9e973d8ce99dd23c77b7fe59b1b64d7fdf6443e577af6a976004e3dc6bfd42a00f", 0xf4) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) write(r0, &(0x7f0000000300)="b704d13ed0a7c3c8eb4761b2ef440b7a297451e89febb7d26123fe8e3bb528a2503f5da051ae70463a3bd1f67e18549f2332cd7b10ae78dbcb91434e019ed63da73b09531626ea5de33a9d9ec253a6eff27b450bc374ac2aaaa3594791bab75b193804531e49d45d1eae0583b3c6137615f91cfc5069250173284b001788b4", 0x7f) r3 = syz_open_procfs(r2, &(0x7f0000000380)='net/ip_tables_targets\x00') r4 = fcntl$dupfd(r3, 0x406, r3) fstat(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000480)=@v3={0x3000000, [{0x800, 0x3}, {0x7b0e, 0x6}], r5}, 0x18, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000004c0)={0x0, r1, 0x80000000, 0x7, 0x5, 0x9}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000500)={0x1, 0x15, 0xff, 0x8}, 0x10) write$eventfd(r3, &(0x7f0000000540)=0xcbc, 0x8) r6 = creat(&(0x7f0000000580)='./file0\x00', 0x80) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x3b, 0x0, @tid=r2}, &(0x7f0000000600)=0x0) timer_settime(r7, 0x1, &(0x7f0000000640)={{0x77359400}, {0x77359400}}, &(0x7f0000000680)) r8 = open(&(0x7f00000006c0)='./file0\x00', 0x4000, 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) finit_module(r8, &(0x7f0000000700)='/dev/loop#\x00', 0x3) tkill(r2, 0x3d) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x1, 0x9, 0x93fd, 0x60b, 0x40}, {0x800, 0x8, 0x100, 0x1, 0x7, 0x10000}], [[], [], [], [], [], [], [], []]}) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000a00)="5972d7a9ffd89b154e23eb49fa72b65d1b7827edf696651a8ba1948268b8fee2979d5f32abbdf45c3db99c90e09b450cf6d7f14ef55d3a2f9f785b301983842ad88e62a0613c5ccc348b8e77ccbd70191730abc1504a9cb043cef8896c9e2b2f9fc6416d0eb0ae", 0x67}, {&(0x7f0000000a80)="04c9a8aaacca1593b86d9d2cad11a698fb8069b627ced405a4b3d6836d1f6f5f1eadfa6ea52186a463d2e6876c2ad25deee13f321cfd1f2a8935511671cfe4be06a2f939fd5a5b2907deff70d988de27ef6420c82aa30a88821e0209562e8a2a81793a558cbc52c2", 0x68}], 0x2) open(&(0x7f0000000b40)='./file0\x00', 0x440441, 0x3) write$P9_RATTACH(r6, &(0x7f0000000b80)={0x14, 0x69, 0x2, {0x1, 0x1}}, 0x14) write$nbd(r0, &(0x7f0000000bc0)={0x67446698, 0x1, 0x2, 0x1, 0x4, "c5116cb5ede0f5a83defc312c95c4c5703e8808ba4796262fe16ec90345f5dc20a22c52a962f6b129ecf75a170877a11d1a75a394f21e055c3f6abe0bc67cb79dc269b120e3c5cf05e0767a30c5012093f2d0c4113bfbf3838d7c6ae36f22f5ad80a4d3c86d7f8ec2f75b936b79771886b0e4baca72bec6b9022a1d9dfb7846dd66bc6a136a1bb7bd6f078153e6ec8109dc47626d3eacbf178169b3ca0da17035df31975f5e78b48803af1a7ced0e63fed778f0d"}, 0xc4) 20:48:21 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair(0x19, 0x0, 0x100, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x400) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x630b343714e02218, 0x70, 0x1800000000000000, 0x800, 0xfffffffffffff800, 0xffffffff, 0x0, 0x37, 0xc080, 0x4, 0x8, 0x0, 0x100000001, 0x1, 0x8001, 0x3, 0xa30000000000, 0x8, 0x80, 0x4, 0x1, 0x1, 0x6, 0xf66, 0x0, 0x8, 0xffffffffffffffe1, 0x1, 0x7, 0x9, 0xcc9, 0x3, 0x5, 0x6, 0x800, 0xd7d4, 0x9, 0x6, 0x0, 0x401, 0x1, @perf_config_ext={0x8, 0xa8fd}, 0x8018, 0x5, 0x3, 0x8, 0x1, 0xe927, 0x20}, r3, 0x1, r0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0x114, 0x5, {"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"}}, {0x0, "3fba2ce8ecce3bfdae4daae61d03416348f642c9aff66edbdb943279212b78f90ab55b689a13824ff4e486f1509517f7d40e25bd3535e47d438e9f4bce5cd905684f12e389073fa2741c153473f2fa6518eebb8cf2a9786e7fc2d1"}}, &(0x7f0000000300)=""/4096, 0x171, 0x1000}, 0x20) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = perf_event_open(&(0x7f00000013c0)={0x7, 0x70, 0x401, 0x9, 0x2, 0x9, 0x0, 0x2, 0x88120, 0x6, 0x2, 0x0, 0x9, 0x8001, 0x401, 0x0, 0x5c6a, 0x0, 0x3, 0x1fb6934, 0xd4, 0x2, 0x3ff, 0x8, 0x8, 0x696d2100, 0x613, 0x3, 0x1, 0x7f, 0x6, 0x89, 0x0, 0x4, 0x0, 0x2, 0x28e4, 0x80000000, 0x0, 0x7, 0x6, @perf_bp={&(0x7f0000001380), 0x4}, 0x100, 0x3, 0x4, 0x7, 0x2, 0x5, 0x10001}, r3, 0x8, r2, 0xb) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001440)={0xdb, 0x9, 0x9}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001480)={'ip6gre0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000015c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001600)={{{@in6, @in=@multicast1, 0x4e23, 0x1, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0x0, r7, r8}, {0x1, 0x5, 0x5, 0x2, 0x8, 0x3, 0x20, 0xdaa0}, {0x100, 0x1, 0x3, 0x4}, 0x16f, 0x6e6bb2, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x16}, 0x4d6, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3501, 0x4, 0x0, 0x349, 0x7fff, 0x3, 0x1000}}, 0xe8) r9 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001700)='/proc/self/attr/exec\x00', 0x2, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) fallocate(r5, 0x4, 0x2, 0x1) recvfrom$inet(r0, &(0x7f0000001740)=""/130, 0x82, 0x40012063, &(0x7f0000001800)={0x2, 0x4e20, @broadcast}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', 0x10080, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001880)=""/135) ioprio_get$pid(0x2, r3) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000001940)={0x7, 0x2}) wait4(r3, 0xffffffffffffffff, 0x8, &(0x7f0000001980)) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001a40)='/selinux/access\x00', 0x2, 0x0) write$tun(r10, &(0x7f0000001a80)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x2, 0xd75}, @ipv4={{0x22, 0x4, 0x800, 0x8, 0xc2, 0x64, 0x1000, 0x6, 0x7f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast, {[@ssrr={0x89, 0x23, 0x2, [@empty, @loopback, @local, @local, @local, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0xc, "e9108be29502c930b305"}, @noop, @ra={0x94, 0x6, 0xf4}, @timestamp={0x44, 0x3c, 0x8001, 0x1, 0x800, [{[@remote], 0x3}, {[], 0x18}, {[@loopback], 0x6}, {[@loopback], 0x3}, {[], 0xffffffff}, {[@loopback], 0x6}, {[@loopback], 0x50000000000000}, {[@empty], 0x3f}]}]}}, @dccp={{0x4e21, 0x4e22, 0x4, 0x1, 0x100000001, 0x0, 0x0, 0x9, 0x3, "d3bc2f", 0x1ff, '0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000001340)={{r1, r2+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000001380)) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/create\x00', 0x2, 0x0) timerfd_gettime(r0, &(0x7f0000001400)) writev(r3, &(0x7f0000001540)=[{&(0x7f0000001440)="3c1f75b02dbe7496f74836e957ccba19aeb267b58cc60a36f931acaecea479a167b4372d70696e23242449feb18d2291a1fc987b551b12407e0f69762a2f5cc654bdbe0c8fcd931a7ce4893828351b00c2ae66d99717a35fdc8b55f60f6472bd231bb17ff6dfe5fee9ef0353eefe81b9d070b7d7654413b9f5cb1f82a73212cc77ca1c2122c9e6337d279b367d9291b2367e3d76a581af07e9bacbdcbe62b11e4274f553f2", 0xa5}, {&(0x7f0000001500)="fa79b307a0fdd8fcc9cc537afbd568ae878580822afbf49e7c0866350e31", 0x1e}], 0x2) r4 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001580)=r4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000015c0)={'ipvs\x00'}, &(0x7f0000001600)=0x1e) prctl$PR_SET_NAME(0xf, &(0x7f0000001640)='ipvs\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000001680)={0x8}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000016c0)={0x6, 0x9, 0x10001, 0x9}) syz_open_dev$evdev(&(0x7f0000001700)='/dev/input/event#\x00', 0x1000, 0x100) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001740), &(0x7f0000001780)=0x8) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 20:48:21 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) getgroups(0x5, &(0x7f00000001c0)=[0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r2, r3, 0x100) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4110, r0, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="654cedfa6763fdaa0f71d8aa0517447f7dd5963bdc43cd251adc82128ae39365afa5b8ad174a5f9696c5125714b0726d7e98295900387e5b37fd6ed4cca01d01d764357af7867ea06dc2a49b00b0db7e2a4a", 0x52, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="38f2f9064689eed588925db400c76af18daf3f960d7da7538664bb9a9a07cb3cbc1581d53903431fda69b28f385c7ea45d80eeddcd0dec8306a5f329888a267ac07276afc45a2af1021ffb9713aa27444d9caec8668b5ff616a4b5511ef700b271fa92c93634f61f79d1af12a6d6aea5a24068d846a3d5c1360ad07c271d731f10b40d1b067d9f3093fe6617d036da97d459a6184d818cb0de3b97cabce3cd992afda83a4bde2795e9b4db6ea6a3fd7815e70603e619700bffd2bf3a6d311992c70aa461927524cbac075d3de9b127c6beafefb7b9f6f1f29a7e8e05eacd613d30be65ef2079", 0xe6, 0x0) keyctl$instantiate(0xc, r4, &(0x7f0000000300)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/dev/ppp\x00', 0x20, 0x1}, 0x33, r5) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000004c0)) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000500)={@remote, @loopback, @multicast1}, &(0x7f0000000540)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000580)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000005c0)={{0x0, @multicast1, 0x4e20, 0x3, 'nq\x00', 0x10, 0x54, 0x3}, {@local, 0x4e20, 0x10002, 0x7, 0x3291, 0xadf}}, 0x44) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000640)={0xffffffffffffffff, 0x9de, 0x80000001, 0x1, 0x7, 0x4, 0x3ff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000680)={0x80000000}) write$FUSE_WRITE(r0, &(0x7f00000006c0)={0x18, 0x0, 0x1, {0x4}}, 0x18) fsetxattr$security_ima(r0, &(0x7f0000000700)='security.ima\x00', &(0x7f0000000740)=@sha1={0x1, "30f4327c55e2be1cd88c544aed329e64a3285d45"}, 0x15, 0x3) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000780)=r1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000007c0)={0x3a11, 0x100000001, 0x1, 0x0, 0x0, [{r0, 0x0, 0x1f}]}) add_key$user(&(0x7f0000000800)='user\x00', &(0x7f0000000840)={'syz', 0x0}, &(0x7f0000000880)="feb4855d772b005218edac07782f87134371e5bc965402fa4914a88fd32d0dac592827681edd7283a94d46", 0x2b, r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x28, &(0x7f00000008c0)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={r6, 0x71, 0x18}, 0xc) fcntl$setsig(r7, 0xa, 0x3f) keyctl$get_persistent(0x16, r2, r4) uname(&(0x7f0000000980)=""/4096) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001980)=r0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000019c0)={'vlan0\x00', {0x2, 0x4e21, @rand_addr=0xfffffffffffffffe}}) r8 = accept(r0, &(0x7f0000001a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001a80)=0x80) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001ac0)={0x2, 0x400, 0x5}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001b40)={'bridge_slave_1\x00', &(0x7f0000001b00)=@ethtool_channels={0x3c, 0x357d, 0xbbd, 0x1000, 0x10001, 0x84, 0x7, 0x1f, 0x7}}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001bc0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000001cc0)={&(0x7f0000001b80), 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x44, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9d3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000080) 20:48:21 executing program 3: socketpair(0x10, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)=""/81, &(0x7f00000000c0)=0x51) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000140)="4168270677679be992e2570ce5630dffe6e3403b38f794a5c188c51eb50c8acaa227934b3a913e25151eb524e6854bfa42e8a53e8408ff3955c0b1aad6cf6d5b79ff8d51c994122327f441af1466539ed3f6903a9247686e821551c888799044e63cdffa24c0ab560d385148832e55aa28a7f716c53403a9ce1c2fe4c48ed6018d9d858ea31414e668b9b2858c31efcfddef09b8ae62ecf1e239f4992beae36d10a822e8599e8b6c4048b461e1732719492a8c9838d1c7dbc589ac8af8b7944a07389316e351c6b424ccdf7a569c9c5dcde5f9640db2d1bf00e6e5dde50fbece2efa58df00abf0f9cc8df30be3f9d9cde3c3e707850dd3cb8b4c2211cd7cdbb1015bce8fa812b39e35eb322e377aec7e02dc829fffe3bd16fe1a3e33a8354ad132e2867e9cd8c83f9e81268fa7e884cea6032e0dec97bc3ed942796ee30febcdd875a3ec742d0a531015fa27c184acb8ba39bb0d7dddd7f80af3c36194126188333ba34514000d02ea72c50a422e38d2900d18e78683360abdaf1878f2234fb00a359f043bb85c820d52ca92fb3e65cf8b72d46572854278d91be7101a78b7c87da37dc5e47e3bc73ddfec26dfe3c46318ff8a6242c36acbe5ed4490c9ee52a9134e0ac4e58ee105e590f76726d6d9875e189716fa6e22bb0b00453e40cbd6b2cd5befa9a263e9fb4ed38f815a98c8083b47b279f9dfdc65aa64660b6f8a06af713574f7966116ab7bf93cf8f86c10f0269c3962b473e8eb4786b042892cb8326fb3f00f40e04e6fe81084b41f73ad779746c1f510426d37f7ebae4b817fec2fccf32ed0429f571c6454b97e1be8911ecd2a55025b91b68ccdc07a2de48fa9ee20e13f327418c66adb61ffa8c5a112476c7477dc3ca9a5cf8baf917a17cdf8dbf923595279c5a94c2973d3fffd3d1d9199af73230c3af1b243befca1616899dfcf18c49dfa84a96a6d1acafc776e178abe0edd100d4decbedc8fa8759f6f28aaa0f8f9ae23ee1a78033636c8bf1e987b500a65d0f8e838af221474bbf5fcd76725e3a73a2b0f558b75be86d2702f9ab3a1d6149d0b8e55cb34436dbb6c3d06d9b05d300c17844c1dae5fc6487e96a44fd9fdceadc85e3ddc34288434af8db61729b9b21db47a280cb8270006de258985176917fec212a04e55cdee6ac3dd42db72f026c2a1003b39c4ebf792455a4ccff2b4fab3dd166ae369876587faf79993799bbafd150f30eb78ffeeb1a8d10dabcaa2803f16312fc5851a94a8de1073442af2f313b404e94351b13f38639c9b9fde283145ea3504838ea3e1b70ee90bf6073c9be751168d01c73ee5be250e2053188a25417ad27db35e307c5f0ed8f64ac66253f2101a4fd731a199eaa3d742b8b8b9df7f325af9d7271cae28eb0ecfa2b0f00ea088556b4601eca670fa5bcb62daf9491ac06d872ea65dcea04a27f718571f9cf81c475592ab20694d9e30a11fd83bc073d0814f310bf2ef8f36d13fb79ee4c1b33ca963226c2b8faa0a89151430c0d0ad8cd636330cfd6541d2b5d757e10612ba61ab0def22e44e48028be57d2324691fa27e65e69e2bf6661c4b0abe0567ab9115f4c1e6dca67f5ef30ae8c030b3fe6e71fdfa7771294177de60037d5fbab2c12064a017d609ceb31c8b880a8bebe80356213be02ffffdc1b750cb68920cf974e4415269d74821fc9fa007d8205c3ff77907a35bc2426bca4dcffc413558bd9a5a413c59145dd84200212062bf3e3e8f9cb6eada87c21cb0b79cb33cdb110c5845dba6234bfa1cac6609a0685223141adb7907ae04fe8e08d8943a9a7b9e97439e6ad8f449715a450e61b2b626342faa4509053221539509bcc7da4217d1e9e361eafa526841bbafadce4c90c103b4ba9c75598536e1e784a6e2f03af8d8fbfbbce162acf192cfd6716d69792ef6a41e49b677413390a0bb86086596db533180a3ee9b1445647374fdc09be3bbd41574ef52d0f60e61da2febaa211179e2d0b2e99a09b29e7230209d68e51be677b875d3c1b3f6e4c47392915e67fafbb1ae8903925b00cb2791431c041fbe1d8dc0d68a4f25bcf03dcf1bf439348173da5a5406a9f21c5ab0f3149b5b7ac6e4b697d3cc8906c274a905b65273654a54b252f29485fa3b8cc6fa7f4c533b91640d56f68e495e35c62cb12b9571ffa7a4ee0b6531697bcfedeabcb416f9e75225a1e012151c1d3624c6d0691e04ac7819792740c495e036d4bb3d39e0fe7f93fbf6511b3d5ac2216f1769a6bd7c71fd81d0a43d1007bb5b72dd51e2df7245cb3442f2bc694310090ac0331afe6985c098caeec0659f4923629ddd3eeb27273dd19bc60102f320a60635f3a9463c7839c87d88521d52743d229d0be5b801bf52d24a8f5d8820cd16b004b402d674bfc721f9311a20e1b1d6da330c761e76db8a1f64d050076978f92bc28eae8e26c22526c91ed5ca4b350262709cc226dcfa64357149cc51012164459c28d2749ed8d9819677b8386da0ddcc425c2142da7ef0363db5a814cf662a3a8a87b1cf18bcce9e5d813b37e1b2357de72951cb9d492004e3e5846dd5c43d1159b50a83123b1dabe23b3a5352763294fd08d18a3e676bb65709c3f7af6f67f9f06cf5d5943b5ba4074f96f6e47d0d1c8bc3cfb05de4c32095eb7fb618b6c05a00e52a76190dc169cc8691264238597a6406417cb020abf5c87434c96bd16a76f8a69a06c66a3e0ebb7e28ebfc4688e7c2e4a07893cd393d7d3824c777d8ab1f0922b2c8a93cb82ace454b3eebccbfa980da256f3feeedbdc6177ad09823e4677bee937f830db7de50e5743ea27dbd5e9e378b6e2a097ef93b3d0d279b4143633c9f886c48ed7346062333665bb3c0d675bdc63a5ab9bf503a0b4b79eb6385a140d5ed80a9d579a2e4c6b83a70d03251cccda3b6efd6d95b5e340c8a5d9da3734d031d8bff1fbdfb5e38ec2e5ff11eee056d5065fdd91fd342b508c45a15eadb9ab45a44f089bc1d084a9d49f1eafc2ef370b94910259f68fbfddde05419443acdb65941b00589b12bfb1ce832e7a3ab16b4fc245d6c32624ade9bad44785d1f4bcd2446282839251d0939c9a9a2a526b4318799855965355fd6bc83ae1eb5a05168a11dea904e09e1ba492c82d24a8970eb01250d7471fa1c8aae8f4ef4d67fdc9ad88ef50087b8ac867d1919bb868145b9d9bba7c0df52a451e7675e4984f251477dc8e663d2fc818d5a609cd964e16f2157892c9ac0bdd663ac53337264c48a78933bf921dbb882542c2d2bc23eb8aeb6f3645b34f4dd7334cd22b369fbf4df7a5cca7815fca27933ff57bf5f00130f1029fa8563542f452b89ed4fc337bb17d7e1ef3ed75ab64bfbee756537e12d38bcf635c3e0bff9d2b15e6daf1b2586b5a540d105dec4fdea3635bf928a972b631f82f78bd0096d97b068f1ac6ff9fc6021370f5f7b17159e8531ee24760d5b271c5763ad93df902ee000e939119b9692aa071bd4e0fe6d84f6cda001bb3a40632118ff02aeb1e4f4617161e2432c4b6f9b611b33cfde3d80adb1f0c8a86f3a851e1689afa1f6502de050e8eb84327e27dfbfa025e6ce9ad1cc3de4aee73146d6f2c0109520a04f35a554d23948f86e0321ea01c5e4c48e0322a1981ff21ce49fb0e8d229e6dfa2cffd25c5500f29b9a642357672131245c3e773709f70c7992b6ae986d3f70e38df875b9a9902c23cb3977d71e8f9aa5a527891e5a10f9aad78dd123ca9fd2895c19675dad8ead92202263c9f0a3c83a3bf8bebce3de16df253595b30a8de3a2332f6c0925c36fee42f81ab821648cc68a584dec8e2cb5eff69b18735e87f4e5acaa6498c040e52a70f826147ec69b0e7dacb2af2d4363f8e064bf318417449f96b62d622ba45f508f7bd62c8048b60dddf1149a34986ee43006bbfbf886532281c1c5bf56926c7ba08aa643fb1e8c7135967aafa8b90aae7b0af7945f98b1b2e708e4feb02638782af780faaa1e42a82097ed1d7a583d1695a0447f77537dee118b2b2f08cf672f97f783eddd3b09e8b294c163f81d6916e7380fddd375165b797ab4fd2b9246319e1a932d0e9a6f390c53ae8f774fde4315e0a21a90ca8b781beffcbc55805d424250b190b5e85b5aae9eec3a09c16a288d8f68a98d4ff1af6d88dae9e3838d54c6caf23d445a581b457314d7ff25c4a0ef4587b31e56b7811932e712e8b1a8676d74ba0c50c43359955b91cafc3e53c8a6305b72428ab6383983938d90dfabcf534461df9f60572332fa02269ac5271592779b5ee990ef8f78d4802f61343824f65377b1f3ba07ad0ae4d0b806c7681efd7600d12d29178f5f45a50e40b26263d91b8ca4d26f8f8a0253e2f50a73ca4eba4c878115852c91fe37adfb41bd2cf4004bc207ac754745e8fc9a27b98fb31f8179501ed7fc901cc6c793501c3b355b94e332022c306eb3783d48ffdb9eb6a3a0ca1bac8f08af528361a0c21406c6be753480ce78dd037baa46097eab874ea74d50dde42f23d2785a70eb314afc6cf49ca0e6dfcabe644ddde4bfd4d0f00d201b75536f7cc54dd603bb2cce782b499fda671ca642a90c6cb892514133e26c7ff53e9874ac334d8f730cb93f4999d073eb0a0a5c261ab4f220f840775ba7bec104e9077c5d83128a429ef337ea0ab36a0dad3fbcb3765779d7b6c10e5c27142ec00ec6c639f89fa4577f8da0f8ebe1e917239a8f97c837853c11e4c241a4bb52d8985d00bc16ff16303fc60e9969d449ba807907d9db82fa8302d1e293a0916cfacc47ba8e0f97d907bebbf0ca260b639a27cd4b3d646dc5a331773c0926e9a0668c7781aadde355cc5d3c09261406d1ab21c4c5bad1b0dfea608f1b2a511d6c5ec9b40811e6cb24f6c575024e12a6d69ec14ebb1f391c950d2be4e35eb403442c9c7eba44e109ddb892d1db772721ab4aaea25209dbfe4a39b24aa40e566e6f808c71bd60ce11284ca54eb6c19124bec0a6cf4e6cf78dfc2e5f46b300a3c25e0353b387ac17ba228afbd2340ae90c758c07265bc6b59e57fd5766f25dbeab92bf85604e137af760acced9a9bff48e81938a0b179a6d42350ff93a79df4ca498297295dd0a5df07118df9f75a1ed740e974a67fc71133a2200425650d3b07f66c155df52a8b95b0bdf03323316cbd587b0727e4b6495bca2bde866b2b8323508e99af8fa7444f3cd0b483fc7fe7b9ab2cbe32149e12a67f5a9af42468ce052c11e22b2da4ad763af07986bc0d847452db810c1507d692cb41190fd2e920122285ffee016b7bf45d36c907c011e840fa8275eaeaaeaa394821b0182bd7a2ddad265664b216aa92e81bbda745eaad514e3a4114aea8a7439cb7e4623fa3e0038620fae9afe723f6fe87d199081bf6d985efefa238e36005598074ad0b324080917faef66a311148ba2132a15ef1da75e75f9dc3bb2f72fd7a0030e101d8c2c6473b02c0eb75ae7fcb531b9288403afc09fa223debbe7cf5021696956fb2d50ae78f7aeb6c57f839d8cb1037a405b872a7d13f10292c9002332c290119e5a3aea95967748b834043a14223b895f9eaa1b5c2c741a90b2abda2fdee01a816ca9de635b18e3ed60d04098256fadeba0513a1d41873a8cb5ddd1e6b1d97aff7169a44ffa0fdb5f6015323462cd91c754ad74bc502d3a1d8b1574f904e3dc8538083476249ed05978ddf960df571ab8c180ff75f42a2bf5f31b7918f23af59ebfc83173ad58295cc145993080e358720ce4e6c7334e69ba378ed47d0461fcff45c2a1c4fb7db4686f4fde1e2ad91647da55a343b69d41607f1f6eb", 0x1000, 0x4000, &(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000001180)={0xbd3b, 0xb, 0x9, 0x40d, "b1d3bad51e429d63a702dfa8d8b1ddb9ad427f5c80f0729ea02843f261dc070d"}) r2 = getuid() ioctl$KIOCSOUND(r1, 0x4b2f, 0x2a5) stat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000011c0)='/dev/loop0\x00', &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='fuseblk\x00', 0x20000, &(0x7f0000001340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x76, 0x38, 0x0, 0x79, 0x0, 0x77, 0x36], 0x2d, [0x30, 0x7b, 0x7f, 0x37], 0x2d, [0x3f, 0x71, 0x3f, 0x62], 0x2d, [0x61, 0x79, 0x37, 0x75], 0x2d, [0x0, 0x0, 0x63, 0x77, 0x3a, 0x30, 0x77, 0x67]}}}, {@euid_eq={'euid', 0x3d, r2}}]}}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000001500)) r4 = dup2(r1, r0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001540)=0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001580)=""/47) fchown(r4, r2, r3) timerfd_create(0x0, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x1a, 0x4, @thr={&(0x7f00000015c0)="08f542f20da2ba6291ef404e5d2c271e9da6a3caea1705bc61874df3606194d3349a1c488f902ce0d4df8d34193a4c333ba44bf4d8c6a2c6d7d378a44eff97fde18bbf8226c6863456697e7fb6d540030e036ee666724ea15ab03b7cb8f77f3f3917d0564a1403a666811651b2c32d607c1c782c6934585676c313ace1d13299a176999fb64a9c2fb58d7d8be66194d7fb57b7f8bc5c311a44fee3885107a726f4321594764d23c25c9271d31086e5b47402", &(0x7f0000001680)="44c831e5caf864c6f8f4fcac83e9e09b5c592f36886c94c970c2489f7c2af2d6fe36f5f088f1640c65a041851dae619f1c1f9a85dbce357d9de0ef20392c428fbdb5a2cdb2322a09f703babd173444955388aed355f89340c396ade46158d692e36d11ed5523649a49513a6d88d872fae2fd61834f93d44f3c92ea223f4a4255384c33fa96dc0deb4c49e9669db1e60478076be28b438def75844cfc33563e84f35e8bd3ef03e4652b67bbea35f196ea7abc0b5167dceb824d550b5877240a88"}}, &(0x7f0000001780)) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/checkreqprot\x00', 0x101200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001900)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001800)="5fb0a2d0740fdcc0b6bdcf8fc17a71f414cace553cb831254743f0185e55fb994205c8a11251694005214fd8ae5c8a4231ecd3de5838b14df2fefb0cb024afea461b0af1a841a42b2edf5f27d9c38904666cdb761e1c6d3c82766f250db3ccc05ee3a8244996851086c54178a2742353a9242235c9b17620d8bf49969254252ed695851a39ab21c5779b850ff486ffabccb3a884179d32ebaa15312ed8adea0c0aaf278d413e2564e03f55ef7a143d61118c4904618e00dcadf0371d939f5a3d4d16208aa575bfb49bb42c02bdae2ddf7277706f18194661e7d846ebe8ac7a6071dd259f48c4837bfad30283245568352637", 0xf2, r1}, 0x68) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000001980)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001a00)={0x1f, 0x1e, &(0x7f00000019c0)="eced3b46f50f144552d42752c547646fcbd657e770e372a6a6dbe0e1fad6"}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001a80)={0x1, &(0x7f0000001a40)=[{0xfffffffffffffff9, 0x55, 0x38000000, 0xfffffffffffffff9}]}, 0x10) accept$packet(r4, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b80)=0x14) recvfrom$packet(r6, &(0x7f0000001ac0)=""/90, 0x5a, 0x40000000, &(0x7f0000001bc0)={0x11, 0xff, r7, 0x1, 0xe4, 0x6, @broadcast}, 0x14) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000001c00)=""/8) openat(r1, &(0x7f0000001c40)='./file0\x00', 0x100, 0x80) geteuid() llistxattr(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)=""/171, 0xab) sched_setscheduler(r5, 0x3, &(0x7f0000001d80)=0x9) 20:48:21 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sync_file_range(r0, 0x1, 0x9, 0x2) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = geteuid() setuid(r2) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10001020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x201, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9d2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x64}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) r4 = memfd_create(&(0x7f00000002c0)='IPVS\x00', 0x0) r5 = dup(r0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) futex(&(0x7f0000000440), 0x0, 0x1, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000004c0)=0x2, 0x1) write$FUSE_INTERRUPT(r5, &(0x7f0000000500)={0x10, 0xffffffffffffffda, 0x8}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000540)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x6}}, 0x30) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000580)=0x5709) sendto$unix(0xffffffffffffff9c, &(0x7f00000005c0)="a0994adc38caa84e4ae5ce591d56c3461a82bc75d83b68fa5fe3fcf62a47fe2b7c923e85f1b1114f", 0x28, 0x0, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/99, 0x63}], 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0xffffffff00000001}, 0x80}, {{&(0x7f0000001740)=@nfc_llcp, 0x80, &(0x7f0000001a40)=[{&(0x7f00000017c0)=""/25, 0x19}, {&(0x7f0000001800)=""/215, 0xd7}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/64, 0x40}], 0x4, 0x0, 0x0, 0x5d9}, 0x5}], 0x2, 0x2, &(0x7f0000001b40)={r6, r7+10000000}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001b80)={0x0, 0x7, 0x100000001, 0x3}) write$binfmt_script(r0, &(0x7f0000001bc0)={'#! ', './file0', [{0x20, '/dev/zero\x00'}, {0x20, "ff"}, {0x20, 'trusted.overlay.redirect\x00'}], 0xa, "38b09d80f39e3105b7985f51a6497cc4517cffbdd88558485a7129652144969f22837fcb96c26bbc2d3be857af23b5efdd3f430000f8ecdd58749da4e26f21c0eb52423c4ed5d5d7aac98d9db7492a9bd70cf573f43348413814b56c6e1b3663dec0751a92d2852ac0c4c580367f90f2370405c46c140e3f0c6de5345b23bbe59e470d2b876df0112e9e67b8313fb9e726945087ca45232e09975d42213643da4265575f4e4fc96af49a3c32f334afd0cfbc80c99b9e3dc71003ffe0"}, 0xee) ftruncate(r5, 0x7ff) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001cc0), &(0x7f0000001d00)=0xc) renameat(r5, &(0x7f0000001d40)='./file0\x00', r4, &(0x7f0000001d80)='./file0\x00') [ 82.451136] audit: type=1400 audit(1544129301.287:5): avc: denied { sys_admin } for pid=2088 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 82.589310] audit: type=1400 audit(1544129301.427:6): avc: denied { net_admin } for pid=2093 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 87.412675] audit: type=1400 audit(1544129306.257:7): avc: denied { sys_chroot } for pid=2097 comm="syz-executor2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 87.473075] audit: type=1400 audit(1544129306.317:8): avc: denied { associate } for pid=2097 comm="syz-executor2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 87.542402] audit: type=1400 audit(1544129306.377:9): avc: denied { create } for pid=3667 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:48:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="80bcdd20c5a2a55d959c15ef232e78", @ANYRES16=r2, @ANYBLOB="1b0626bd7000fbdbdf250900000008000500f7ffffff0c00030008000100020000004800020008000400000000000800060000000000080009008000000014000100ac1414aa000000000000000000000000080003000000000008000700f3000000080004000100000008000500050000000800050001000000"], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0x0, @loopback, 0x4}, 0xffffffffffffffaf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000200)={@remote, 0x4}, 0x20) [ 87.600960] audit: type=1400 audit(1544129306.437:10): avc: denied { write } for pid=3667 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 87.611375] audit: type=1400 audit(1544129306.447:11): avc: denied { setuid } for pid=3686 comm="syz-executor4" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 20:48:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x40}, {0x6}]}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40000, 0x0) 20:48:26 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x1}}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)="d5", 0x1) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@mcast2, 0x4c, r3}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10480}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x244, r4, 0x18, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x228, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x766b9ed2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) 20:48:26 executing program 3: socketpair$unix(0x1, 0x800000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)="a5bcda869c2b797d9ba3a82b9cd09808cac1907265e970865070bc279b366c5ff99ab4a611082e69423b219c40198e3914dc991b75ba2c5bd726b08f4abb83816328459fce1dab46900c6a88ed06ec437dbe9b35e6d5572d05430ec863d5dfc808cfc49a2d9f64626f57f00e1702fb19b0b48ec24c9e195f4ac4ca675f68ec6a212355f435f387b265d78487c18a50c70bc22c02087c3c4b2061bc9230234820ffa99fb743a8363287eb29511910dfaef46d92ac8e8c64cf1ce2fe75d786c5070a017080a3de9bd139e4c7400cf412fb0b458c0a92f353fb65f920c6b80f704fa423ebc3fe8d96b58d2883d3fe57bf70c2a694afaa7f98d0d4bdcd09a8a403fb") 20:48:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x328}, 0x18) getresgid(&(0x7f0000000480), &(0x7f0000003340), 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x0, 0xc000000000000000, 0x0, 0x0, 0x2, [{}, {}]}) 20:48:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000600)='wlan0,#cpuset}\x00', 0x7) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)="0000001ae30a704ca9f9e59cfb3097252f7c28c58d20742f520bdb786ca94882000000", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 87.617247] audit: type=1400 audit(1544129306.457:12): avc: denied { read } for pid=3686 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:48:26 executing program 3: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000000c0)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', 0x0, 0x0, 0x0) 20:48:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x6, 0x6, 0x4}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'security\x00', 0x4, "b7cc4757"}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x8000, 0x1, 0x1, 0x1, 0x7, 0x2, 0x200}, 0x20) [ 87.707180] audit: type=1400 audit(1544129306.547:13): avc: denied { dac_override } for pid=3703 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 20:48:26 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$peek(0x2, 0x0, &(0x7f0000000180)) listen(r1, 0x0) r2 = socket(0xa, 0x20000000001, 0x0) accept4(r0, &(0x7f00000002c0)=@l2, &(0x7f00000003c0)=0x80, 0x0) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7}) preadv(r3, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7f, 0xa4, "21b525f2fa2afed8d44f16baebc4d6007eeb33dbb73845e7f00fc26b43fea79c78178ff8dadf6ab8a61bfc10fee00895c5108663292c88dff93578bb9665fb61bd76f622b3b6b07cc9f21c369ff9d0ef479b7f32d6497e450628407be7a32ce8621f0da72f27243bca8afdf396f0c1480e694318ff5008cc66e00ab0a5a938f1ed45c41717bb1597674b52397ea7b954dd21d8644a0f7a74ba48ea55fafed72a1f2ae057"}}) 20:48:26 executing program 2: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="747275737465642e7061675c6504c0ea8cdfd6fa9cfc656d6170001d050071e50b1c29f07d33fc073e7594d92b32f37c2d2bb2593b02fb82cbc8cb3bea762fd129b4858e3aa3743e8afe65bacb6c9bf14fd781ee09b8ce08d06168ad0e7dee4d9bad5ca05b6dac45a4c173cb8c021e67b8d16585a681861a4f6ed8822236ae8e0571c816b81be02f08ad6d7465bcd4ed4530266a59e2f672711a8c6927bbcc1002e08a27b64fb9317f0d60c465e9da4241dbd367f6d5fe90ace9cdec254ed07724cebd152a443df7c8468dea66b166fc1465475fc1c4c8618c6e13352fca629061b2d32b063288647f0b2af78d34256b8ba39a8894fe56ff377da43d06b07662a25ad31cc5e777"]) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @multicast2}, 0x40, 0xfffffffffffffffc, 0xfa, 0x7fff, 0x9, &(0x7f0000000140)='veth1\x00', 0x4, 0x0, 0x2}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000480)) write(r1, &(0x7f0000000080), 0x10000027d) unlinkat(r1, &(0x7f0000000680)='./bus\x00', 0x200) write(r1, &(0x7f00000009c0)="dbbf55c8c0e0578188e054cafa0a6c0cd734dd4ba950213d31cfc9d6dfe746a6a16cda40e7b50f22876525f469d612ca7b0879882792cd2ecba9d216c675dc4cf5243b77cc4bc792e47730ca69672c2b0969f15edba1320defcf603de3236fa4e0bbaa09dcfd09e84c14cd49b8c2e829c7fc7212bee048d948d7d46c52de6facb6c061733b5ca644e1799da9d5fef4a38163bec07550e06b0c", 0x99) setxattr$security_smack_entry(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='-#,\x00', 0x4, 0x0) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) setxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000640)='security.ima\x00', &(0x7f0000000a80)=@v2={0x3, 0x1, 0x0, 0x1, 0x25, "515098f3e39b61007b97f70fd3cb9e5413271e349bd9058da6f3be0e86bc0e1df3305d9e5d"}, 0x2f, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x0, 0x100000001, 0x7fffffff, 0x0, 0x8, 0xffffffffffffff9c, 0x7ff}, 0x2c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000600)='./bus\x00', 0x0) r4 = memfd_create(&(0x7f0000000780)='!\x00', 0x0) flistxattr(r1, &(0x7f0000000040)=""/114, 0x72) r5 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f00000006c0)="764ec8681f08d6762f861d7c33bd8b59bb7c7bcdbc3d61e71c69986594d498030b207b020d901bdc0460a16eab40c26b844ce4228752623a8e7047c2484c787684bae6f30c79f9b5fa894c4a517bd93fcc8cf38821ecae226fd203903bbb6009752905054aae471b89cf63a45f", 0x6d, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r5, 0x8) symlinkat(&(0x7f00000005c0)='./bus\x00', r3, &(0x7f0000000740)='./bus\x00') openat$cgroup_subtree(r2, &(0x7f0000000400)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r4, r3, &(0x7f0000000380), 0x2000005) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000900)=""/132) 20:48:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x500203) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000001240)) 20:48:26 executing program 5: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101000, 0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) rt_sigpending(&(0x7f0000000100), 0x8) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 20:48:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}, 0x1c}}, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r2, 0x400) 20:48:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x10) open$dir(&(0x7f0000001280)='./file0\x00', 0x30000, 0x8) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x25, 0x0, &(0x7f00000000c0)}) r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) r3 = getgid() getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000100), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0xb, 0x20, 0x9200, 'ip6_vti0\x00', 'veth0\x00', 'team_slave_0\x00', 'tunl0\x00', @local, [0xff, 0xff, 0x91372c84699d0626, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x5, 0x8dea, 0x2, 0x0, 0x0, "80f031eea27a0a6d8b4513c6893413ff74d90492b0757b108312e1aa8193db00fbf428f63cc411dfd9a72b1ab4be12fbf17adbe08883e4460ae0c4e9393940ef"}}}}, {{{0x5, 0x10, 0x8848, 'ifb0\x00', 'bcsf0\x00', 'veth1_to_team\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], 0x980, 0x9c8, 0x9f8, [@comment={'comment\x00', 0x100}, @u32={'u32\x00', 0x7c0, {{[{[{0x80000001, 0x2}, {0x1ff, 0x1}, {0x9, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0xf0, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x7a, 0x1}, {0x2, 0x3}, {0xcc6, 0x3}], [{0x8, 0xffff}, {0x3ff, 0x6}, {0x100000000, 0x1}, {0x7fffffff, 0x1b}, {0xd7c, 0x100}, {0x6, 0x8001}, {0x0, 0x3645}, {0x16e2, 0x7}, {0x4cdd0a96, 0x9}, {0x101, 0x1000}, {0xaa0, 0x7}], 0x2, 0x7}, {[{0x1f, 0x1}, {0x6b, 0x2}, {0x80000001, 0x1}, {0x1, 0x3}, {0xe860}, {0x4, 0x3}, {0x5930}, {0x7}, {0x4, 0x3}, {0x0, 0x4f73c83f4628e218}, {0x1f, 0x1}], [{0x4, 0x1ff}, {0x5, 0xfb}, {0x1cc, 0x1f}, {0x6, 0x1d7}, {0x7ff, 0x4}, {0x1f, 0x10000}, {0x2, 0x7fff}, {0x5, 0x1}, {0x1, 0x7ff}, {0x0, 0x100000001}, {0x6, 0xab}], 0xa, 0xb}, {[{0x200, 0x2}, {0x7f, 0x3}, {0x28fa, 0x1}, {0x80000000, 0x3}, {0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x8000, 0x3}, {0x27, 0x99fa3ea361a04cca}, {0x4, 0x1}, {0x1, 0x3}], [{0x7fffffff, 0x8}, {0x2e, 0xf46e}, {0x100, 0x8}, {0x0, 0x7}, {0x6, 0x1f}, {0x80000001, 0x5}, {0x1, 0x3}, {0x47, 0x9}, {0xff, 0xfffffffffffffffe}, {0xfffffffffffff8ba, 0x3}, {0x2, 0x7f}], 0x9, 0xb}, {[{0xffffffffffff3e2c, 0x3}, {0xf038, 0x2}, {0x1000}, {0x2a, 0x2}, {0x100000000}, {0xfffffffffffffff9}, {0x1000, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x4b}, {0x7, 0x1}], [{0x3e36, 0x20}, {0x84, 0xff}, {0x2, 0x2}, {0x9, 0x40}, {0x1ff, 0x100000001}, {0x2, 0xffffffffffffffe1}, {0x1f6, 0x9d45}, {0xcd01, 0x7fffffff}, {}, {0x3, 0x7fff}, {0xfff, 0x4}], 0x4, 0xa}, {[{0x8, 0x3}, {0x5, 0x68132028622b89d0}, {0x4, 0x3}, {0x6, 0x3}, {0xcc, 0x1}, {0x9, 0x2}, {0x5749, 0x3}, {0xea86, 0x1}, {0x4, 0x3}, {0xfffffffffffff001, 0x3}, {0x5, 0x2}], [{0x1ff, 0x9be}, {0x1, 0x7fff}, {0x4, 0xfffffffffffffffa}, {0xa6, 0x6}, {0x3, 0x800}, {0x9, 0x5}, {0x6, 0x774a}, {0x5, 0x6}, {0x8, 0x5}, {0x6, 0x10000}, {0x5, 0x3}], 0x7, 0x6}, {[{0x2}, {0x2, 0x1}, {0x3f, 0x1}, {0x8029, 0x3}, {0xfffffffffffffff8, 0x3}, {0x4, 0x2}, {0xff, 0x3}, {0x2, 0x1}, {0x50}, {0x400, 0x3}, {0x6}], [{0x1, 0x81}, {0xe8, 0x9}, {0xee7, 0xf35}, {0x4, 0xfff}, {0xfff, 0x9}, {0x200040000, 0x9}, {0x6, 0x80000000}, {0x6, 0x8001}, {0xd48, 0x6}, {0x0, 0x6}, {0x5, 0x8001}], 0x7, 0x8}, {[{0xfffffffffffffffe}, {0x0, 0x3}, {0x4, 0x1}, {0x9, 0x1}, {0xe1, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0xffffffff}, {0x2}, {0x1}], [{0x9}, {0x78c, 0x2}, {0x9, 0x5}, {0x1, 0x3}, {0x31, 0x99}, {0x1, 0x1}, {0x26f025a4, 0x9}, {0x38, 0x8000}, {0x27, 0x7f}, {0x3, 0x9}, {0x1, 0x4}], 0x0, 0xb}, {[{0x9, 0x3}, {}, {0x4}, {0x3f0, 0x3}, {0x81, 0x3}, {0x5}, {0x1, 0x1}, {0x1481, 0x3}, {0x8, 0x2}, {0xfe1, 0x1}, {0x7fff, 0x2}], [{0x1, 0x10000}, {0x3, 0x5}, {0x7, 0x6}, {0x77f7}, {0x4, 0x30000000000}, {0x8000, 0x8e}, {0x7, 0x367606fb}, {0x200, 0x80}, {0x5317cec5, 0x5}, {0x5, 0x9}, {0x40, 0x5}], 0xb, 0xb}, {[{0x7, 0x3}, {0xdd4b, 0x1}, {}, {0x5, 0xd0a91f047f40e5cd}, {0x1}, {0x1f}, {0xffffffffffffffe1, 0x1}, {0xd0}, {0x1, 0x1}, {0x5b85cd5d}, {0x6}], [{0x1, 0x9}, {0x800, 0x401}, {0x6, 0xa16e}, {0x8, 0xde}, {0x0, 0x10d}, {0x7, 0xfb}, {0x3, 0xffffffffffff0000}, {0xb7, 0x5}, {0xffff, 0x59}, {0x80000001, 0x948}, {0x5, 0x83}], 0x4, 0x1}, {[{0x0, 0x2}, {0x81, 0x3}, {0x92}, {0x80000001, 0x1}, {0x9, 0x1}, {0x9, 0x3}, {0x36, 0x3}, {0x2, 0x1}, {0x5, 0x1b3cce35caa62958}, {0x80, 0x3}, {0x3, 0x2}], [{0x20, 0x1}, {0x401, 0x7fffffff}, {0x99d6bca}, {0x7, 0x4}, {0x0, 0xffff}, {0x401, 0x6}, {0xfd, 0x800}, {0x2, 0x7ff}, {0x1000, 0x8}, {0x7, 0x7}, {0x7, 0xffffffffffffffff}], 0x8, 0x6}, {[{0xcc, 0x3}, {0x5}, {0x200, 0x3}, {0x6bf, 0x3}, {0x100}, {0x8}, {0x0, 0x3}, {0x8, 0x3}, {0x9}, {0x81, 0x1}, {0x8, 0x2}], [{0xfffffffffffffffd, 0x9}, {0x8, 0x6}, {0x3, 0x7}, {0x3}, {0xf12, 0x6}, {0x3, 0x2}, {0x7, 0x40}, {0x5, 0x7}, {0x1, 0x401}, {0x1, 0xb65}, {0x4, 0x81}], 0x5}], 0x5}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x100000001, 0x7ff, 0x1}}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0xd, 0x2, 0x80f3, 'bcsf0\x00', 'rose0\x00', 'syz_tun\x00', '\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @random="907cde4bb7a6", [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe8, 0x118, 0x148, [@ip6={'ip6\x00', 0x50, {{@local, @empty, [0xffffffff, 0xff, 0xff000000], [0xff, 0xff, 0xffffffff], 0x7000000000, 0x32, 0x8, 0x10, 0x4e21, 0x4e21, 0x4e23, 0x4e20}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0xd, 0x4, 0xf8, 'teql0\x00', 'veth1\x00', 'gre0\x00', 'yam0\x00', @remote, [0xff, 0x0, 0x7ab85853bb9f67ce, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0xe8, 0x118, 0x148, [@owner={'owner\x00', 0x18, {{r1, r2, r3, r4, 0x0, 0x2}}}, @mac={'mac\x00', 0x10, {{@empty, 0x8}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}]}, 0xec8) r5 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1f, @ipv4={[], [], @remote}, 0x3}, 0xffffffffffffff3a) sendmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:48:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, "bd09fa22e744346a1dba567e71bea73f7afb576eb418977e7d3ea7b87a0003c53668a54d089ddc17c3995a3908dce66bb93ca423f9046ec9c38e22061e8b23d4", "299bbe39a1f635f6d2ef1a60b44f0979dd007b9722dc91c58a98949cc8e5af146d8f12b932ed5711ffc6a04abe67b7f38e129940a64d020eaf45340477a1454a", "fd4766a94d74905bcbf01d42d30cd0273808f4ba92db942d87c67551cef6ee31"}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 20:48:26 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffffffffffa) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x7ed78e1ac9452160, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc\x00') ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, 0x0) fallocate(r2, 0x2, 0x2, 0x10000000000003) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') prctl$PR_SET_ENDIAN(0x14, 0x3) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x0, 0x6}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r3) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 20:48:26 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}, 'ip_vti0\x00'}) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/75, 0x4b) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x80) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/18) fcntl$getflags(r1, 0x408) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/153) [ 88.177724] audit: type=1400 audit(1544129307.017:14): avc: denied { map_create } for pid=3773 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 88.185715] audit: type=1400 audit(1544129307.027:15): avc: denied { net_raw } for pid=3805 comm="syz-executor0" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 20:48:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xe}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$input_event(r0, &(0x7f0000000000)={{}, 0x15, 0x0, 0xffffffff}, 0x18) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xc0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) 20:48:27 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="441ffffffeffffffffff004b867100fe36cef3e26def27000200000034", 0xfded) 20:48:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB="34f01dbba2c6f572e875d3482293212444d7ea398d1173cf0d9c33f745edbe5d3ee686dd7296c9463e8f5cc9f746250c5e404260933ed72583548545a6d211da72c94939ead76666d432585a05900d72e35fe620d03100486cbd1f7ad9f8dfd32879dbf65d7b47a0a2fbb89ac066dd88c5861558022d7a94cdf6f124773a80fcc0d6326e8e439195505d116db0ef421a41ead695be3f626570e2deda7db4a64de6df9872bcf07d09c4f1801370e5efcda41a5769da95237baa33b743b3fefb03d5f0f387a2cf429f9b"]], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 20:48:27 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="550000001e007f5300fe01b2a4a280930a60000000a84302910000f83900090035000200060000001900050100000000000000dc1338d54400009b84136ef75afb83de448daa7227c43a0608299b060cec4fab91d4", 0x55}], 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x3e44c1a0ea9597d9}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x200001, 0x0) 20:48:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0x10001) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000080)='system_u:object_r:c\x00\x00\x00\x00ab_exec_t:s0\x00', 0x7) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x80000}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)="2e2f636714a2b2970500000000a7f746ea726f75702f73797a3100e3de44a73c7f8a63c3def68f7b0e1222d471482ef0656db67ef8184e3ac61f8d0cb989b2ea614c042522d75d88b4eaa4267895c1318ba672aa990a087a5ba69c2a6b04e7a25c740ed01eab5c6a1db5119d01b00c0000000000000000", 0x200002, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0xc04) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000980)=ANY=[@ANYRESHEX=r0]) listen(r3, 0xd5) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x1fd, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 20:48:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x5, 0x80005, 0x3f80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_create(0xfffffffffffffffc, &(0x7f0000044000)={0x0, 0x8}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000040000)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000100)=0xc) 20:48:27 executing program 5: socket$inet6(0xa, 0x80007, 0x100000001) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x5, 0x12) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) utime(&(0x7f0000000200)='./file0\x00', 0x0) 20:48:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10200, 0x20) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x5f}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x9) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x4) 20:48:27 executing program 3: mremap(&(0x7f000053b000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f000053d000/0x4000)=nil) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 20:48:27 executing program 2: epoll_create1(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) close(r0) clone(0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000003c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)="6d656d653584812d26cb9367000000000f000000", 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r2, 0x89e5, &(0x7f00000003c0)="e0eaeb9522fac946efb7c0ad7a744b8e8473c20d2e82d3e33371646d40c5c702ffe22534257375bb0041b7a2a79debd69143ae5c4159805f34986441607d3c18c68e9e771463dbf7b8") sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x41402}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x24000044}, 0x40004) add_key(&(0x7f0000000a00)='cifs.spnego\x00', &(0x7f0000000a40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000000980)='logon\x00', &(0x7f00000009c0)={'syz'}, 0x0) flistxattr(r1, &(0x7f0000000800)=""/67, 0x43) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r1, &(0x7f0000000140), 0x8000fffffffe) [ 88.743614] input: syz1 as /devices/virtual/input/input4 20:48:27 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xa001, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000fb9fc8)={&(0x7f00008ee000), 0xc, &(0x7f0000fe8000)={&(0x7f0000855e68)=@updsa={0x138, 0x1a, 0xa09, 0x0, 0x0, {{@in=@dev, @in=@local={0xac, 0x14, 0xffffffffffffffff}}, {@in6=@mcast1, 0x0, 0x3c}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'lrw-serpent-avx2\x00'}}}]}, 0x138}}, 0x0) [ 88.794327] input: syz1 as /devices/virtual/input/input5 20:48:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000000)=0xe8) fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000", 0x33) write$FUSE_DIRENT(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x17) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="cf235df74d230b55d19b28b88612499f35d3e52a050d276f8178b64a8d4b00aec2138c7585cb36babdae22d6c872e916c7a834d3538742f6f7d5861f8be14aa3d268308a316d0f4b02a105154f1aea575fb3d2ec5d6a6af55d96f5c7dcb825a5b07e8d24ee88ae6b4a3f6cfd161a1dffc466bae5d2224e9b92e1be3b7b8ddbb991fbdcbbc87b8250d3217dca1fa296ddbf04d4ceffc5506735f7ce189153ae"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) 20:48:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) 20:48:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000140)="e25516154b2b17757e468c820988633eae59d0b850919f0e78c5a6a374aa9c7e88c6f3b769f122fccd989067035ad9b90742e40f92554a3f00fa3aeeebb52fb171f7dcae984488cdd34079753eb5aa600b1d1dd661384519fc836a61f804e346c448d9eab0894a59aa9254c4dbb6a0544627f8267f2c478f7a6849991a228e47327ac4e6b3b28aab475919f8b6d6f64a", 0x90) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000029000000050001001600160000000000"], 0x18}}], 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000000), 0x4000000000002fd, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 20:48:27 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020dfff910000000000000000000000008001200000001000000000000000000060000000000000073e22c3000000000e0000001000000000000000000000000000000000000000000002000000000000300060008000800020080ac14ffbbf00000000000000003000500000000000200423b1d632b91c52000000000000002252491fc6bfe1af280c6a19c285bdac30b5d58355065c0de6bccbeb615cf55e193b598df3a5b"], 0x80}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000140)=0x80) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000200), 0x3fffdda, 0x4000001) [ 88.919386] input: syz1 as /devices/virtual/input/input6 20:48:27 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f00000000c0)) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x88, 0x40, 0xfffffffffffffffe, 0x29) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) setfsuid(0x0) pselect6(0x40, &(0x7f0000000000)={0x31, 0x6, 0x100, 0x6, 0x0, 0x1, 0xc93}, &(0x7f0000000040)={0x81, 0x3, 0x7, 0x81, 0x0, 0x0, 0x6, 0x10000}, &(0x7f0000000140)={0x6, 0x81, 0x3, 0x0, 0x5, 0x100000000, 0x9}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f00000001c0)={0x8f}, 0x8}) sched_setattr(r2, &(0x7f0000000440)={0x30, 0x7, 0x0, 0x0, 0x6, 0x7, 0xb707, 0x9}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000100)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x303600, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x0) 20:48:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x40800, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180), &(0x7f00000001c0)=0x4) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r1, 0x409, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x2f}, 0x1c) rt_sigtimedwait(&(0x7f0000000000)={0x5}, &(0x7f0000000040), &(0x7f00000000c0), 0x8) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000280)="1787ed76086203a8c8024d2f42d35fb3c7c01189190a95d9b906570f1236c633a604c5d4718aaa60b9f7d6989e6808bae678c8fe4d667d81c28f01746e64e3985f737a98a5b538a3d65e6e934071f17a3cc441d3eccb41871dd79f8942096bfc87709fd1603615e23a74daa45600fb5f107231527ab8104e34d32afdb639d4998dc33c4832873253745ab878013a7c2332c0bbb96727c5e879ad10171f0107b559aa7d4afeb8f976ab3ce248e93ef4a9d50d4437420963a22915cf15b638bf1f4c3d88bcd6860791844b8d61170b33fa1dbf5dd8b50029ea964e6577dc9a4c") 20:48:28 executing program 3: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept(0xffffffffffffffff, &(0x7f0000000c80)=@pppol2tpin6, &(0x7f0000000b40)=0x80) r1 = socket$inet(0x2, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000001c0)=0xe60, 0xffffff04) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$poke(0x4, r2, &(0x7f00000000c0), 0xc146) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x402102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() socket$inet(0x2, 0xa, 0x7) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ioprio_get$pid(0x2, r4) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000b00)=0x10) 20:48:28 executing program 0: r0 = socket(0x11, 0x800000003, 0x600081) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xff0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={"0eb9f4f3c0fb052100", {0x2, 0x4e23, @multicast1}}) 20:48:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000100)) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000500)=""/115) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'bond0\x00', 0x180}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) dup3(r0, r2, 0x80000) r3 = dup2(r2, r1) fsetxattr(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="d9ca3a11abb141b61f9774751d501b72797e1ed589f6d73c803ec6a4a426ecb6d126c2b2050319d92095c1897802e4f92f9f6055df9b64a6d2954666262b688ea091f9379ac4560a29b378ed11542788e3b320ed47191b321a791ff09345f458d28a00e43433c722"], 0x0, 0x0, 0x3) 20:48:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x80000000000000c, 0x71, 0xb, 0x0, 0x0, 0x9cffffff}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 20:48:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000002b80)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/psched\x00') 20:48:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000009c0), 0x49249249249262d, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) r2 = getpgrp(0x0) prlimit64(r2, 0x3, &(0x7f00000000c0)={0xd878, 0x8}, &(0x7f0000000100)) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000000), 0xffff) fcntl$addseals(r0, 0x409, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000001380)={0x50}, 0x50) tkill(r3, 0x1000000000013) [ 89.696201] audit: type=1400 audit(1544129308.537:16): avc: denied { prog_load } for pid=3922 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 20:48:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x2080, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x5, 0x6}) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r0, r1) setsockopt$inet6_tcp_buf(r3, 0x6, 0x3f, &(0x7f00000012c0)="c0b21ea9bea76eb47dbc7b4fb910fe73933fb7d63e4abe27506f439313e5e2b4f4d5b5ed5b0c992ac1b8da4f1dd1eaac8a6ff8145434e614111ecc4da18231b35c5e22740f02c20a375789dc2af52c1a1495e9142fe3ad2b0c0e0f30c9675839fd203dba0686f59fb248e336d70a4e1f59461066746cd7a39599397f1804b8f56bfbd4a04f4e451fbd899511afa74e37a7733fecaac373b51d7e0711ae032ee598699167d997472a61bf575c9df9666c10d446b8fcf2ab32e6c0c2fdb950b773f3c229c28a629e519b224435e728baedb5afcb0bbe39264d4c9c0f0cfcb92ec1ac8478d94d29", 0xe6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x4ea}, @sack_perm], 0x2) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000002c0)=""/4096) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f00000000c0), 0xd24a4b35186dc0f9) 20:48:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a000000000000ec000008000800120000040000000000004d00000000000000000000008ca9ac39000000ffff006b36ebc6556c898a2e0100ad790000000000000000000000000200000000"], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x2ae, 0x0) 20:48:28 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000040), 0xffffffffffffffbd) fcntl$addseals(r0, 0x409, 0x0) memfd_create(&(0x7f0000000000)='vmnet1\x00', 0x5) 20:48:28 executing program 1: clone(0xfd2504094cdf0712, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r0, 0x2d) prctl$PR_SET_TIMERSLACK(0x1d, 0x1fffe0000000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x7ff, 0x3f, 0x4, 0x1, r0}) ioctl$VT_ACTIVATE(r1, 0x5606, 0x799d) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3f}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001b40)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001c40)=0xe8) stat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000180)) sendmsg$netlink(r1, &(0x7f0000001dc0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x2400007}, 0xc, &(0x7f0000001ac0)=[{&(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000190002002abd7000fddbdf257d8c12dcfc11a76ff50000007f5681f932bc3b59287b16b2a667cbf342a4eb76b247c2"], 0x1}, {&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003f008000000000000000000000000000aa08005700ffffffff0c007a00d09ae5bc6fbd3f0008007c5eee78cf1fd3038841f9adcbda2e1e00", @ANYRES32=r0], 0x2}, {&(0x7f0000000200)={0x1ac, 0x20, 0x400, 0x70bd25, 0x25dfdbfb, "", [@generic="05ddb4b54aab8e44e9dd510e3df8e02d06ff7b45b20fa6097e09952e85b81892de9c22ead56f6280197c716e2584c83c487dd2ee8e1c9c2d8ae0404fb7cc32caaeb614555b98e9dccac12f5c6dc490f5898166cda83c3d5b354659770642d4f91dc7d01a509eeb403cba6fe1063672ccb7ef2452c4d9739de6e1d7f577bc28980dcaf8d57bc2de42b8c7258dec3b8f39054974be5d4a246a63c39d785168e94a058e6a1ed13e61ec9efb32d30622ddb7645f29b6358fae359f44e3db19aecbb2df612ae452a3bf2edff96a1f91093e36e7bb32ac", @nested={0xc8, 0x23, [@typed={0x8, 0x64, @pid=r0}, @typed={0x4, 0x88}, @generic="f207", @generic="85422115886ac57700689e1cec391491e579fcdd230695d6315acb38187bfe0fb2465e6e68ef50fb0d3d3b0c71a2c7ac701074c80eaebb47282c9581db4d3ba34b870bb128b7a5e9eec4f5539f2330d73e7d0466fa612900b272ccfcd292f5981289e3b33955cf1ad7cc663719f77b84315e3c8e80b990fd21e9f7b69301214b3b8e00332456c42ff07ed01426605a59691a1a6e69cf12abdca398cabc27d9dd84b70458c582d4df120cf5fbccc675aa663674924ed2"]}]}, 0x1ac}, {&(0x7f00000003c0)={0x14c, 0x13, 0x300, 0x70bd2d, 0x25dfdbff, "", [@generic="12856a5b5f6615b2df1fb92c5c3fc77041728213a69cc39748c938836a70fd6b366b63ee629f66acd27720f256b0c355e81f177de7d296f6a7680e820304385b0e650849af2df5a5f18788f1fff8b77230398efbcf63be875a06df4c2b1bde262e2fe4a3c29486377214e84f26b5bb914781902d7e1d338513449e12c3d96792bb54594904", @typed={0x8, 0x2d, @fd=r1}, @generic="40b7b5d924a03391f3b7e9b3b59a82297dd5e541ae25013d4af11b2ba2a4666c84691132057047cf04ca49b0f744524b8dab5bf466af12259be4c9247e256d44c67f628beb8447a214ac8eda2b507c1c4f682a42253d7bed3b30925a1eec8d24c49f5978a7ecf89cf6965a64752cbee6705648dcfb7504787d1fbd51935b8d47499e172e3a3fcc5b486561883c2f9ebda67e09606010993222ce70ff688a08aac4da019a997fd999fdaaba0f"]}, 0x14c}, {&(0x7f0000000540)={0x10, 0x27, 0x304, 0x70bd29, 0x25dfdbfc}, 0x10}, {&(0x7f0000001e80)={0x318, 0x11, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x17, @fd=r1}, @typed={0x8, 0x16, @pid=r0}, @nested={0xf0, 0x16, [@typed={0x8, 0x30, @str='\x00'}, @generic="59df6b8993c690f1b929f66cf3ff636777bc996430062c73c8e27136a10f3992cb24ae46e22f06e2800ff53925b275dae1ada422bab5df6f71be9127eb8b4dc87def3c454eb4b337cf8289253a57960aa3e9ad48133b8e58355f3c1851d3c507fd0f7f03dd24d87a91f1ba99036c6df61174e4b57f4acf0a453860b584451bf5022255714c4d6966ec481b0547bd5f9850fda7018a27ded4837ba1b8334aec8535ed881a461e5885a78e10708c70e89bd6a036d4ad4c0df9468a4ac28e150f14cb360cf796d25901740c0fef41273ac49c44a2bb501463fb13d0d29fdeac33d263"]}, @nested={0x208, 0x95, [@typed={0x8, 0x15, @uid=r2}, @generic="22ac05e983af9a13b09261976b855662247b87bbd74bd7811db3168d0634f6fee200fc82a7f8e3e41a0cc797699a73a2690d84eefb41b1ffa9", @generic="e7f4f83cfa7a67d0f7964d0b9857384dd44b8873ed94ab4140afc178712712b0950f8ed44fe34db66bea17f4380b51f8b56d2203737bac246b9725508a6a0eb6945ce1bd1e23a29ee1fbad7f4eceddac79a676711962eef573dc3371bc9db9a45b79e0ece176e354f9e81d15a42f2dc5f1e97ff734240bdc234b29543415747c9c20eb34fa608aa9987b22ad183954505ee515a1127ecec6be0c0d8e350ad906ff5767df93a5efb590dae18081dbd18ea5c947a6294526a3b0377f170c8d57fe1e85e2b33f885164a07ab0988d6d5a6adb8b1a60fa812dbe0f0c7c571ab80610c0286b7375f09a", @typed={0x8, 0x6c, @ipv4=@local}, @typed={0x8, 0x4e, @fd=r1}, @typed={0x8, 0x7c, @u32=0x1}, @typed={0x10, 0x10, @str='/dev/zero\x00'}, @generic="dabac6b25ef40a6ef4606e3009f276597dfe01aa022408294c16a59a668f82220f240aa6c0f2b8ed697389e00ba15091edd91611fd438610bdaf402e771fa31807b8d7167cb162f515a12dcfb9a9e181cc7f44ea3aa155cb36f9cb88f78577f083a98d8f4ace95b1be31fc507430335b5e6e87ca02695786d4cde2a58f898fb9cc32550d2d18d25b7d110f8f2bef9d43c582ecc95e65edd037ff67a978f78a87ad5ab0f98d9a481f98daacf8a5f93130b1"]}]}, 0x318}, {&(0x7f0000001840)={0x25c, 0x3d, 0x300, 0x70bd27, 0x25dfdbfe, "", [@nested={0x244, 0x34, [@generic="b1772345964281f03370734cbc0c258d7a0168ba0e5e5cd40e816c50b188a78a77f1fcca72d09acbe6ea5792fa9f43614617d2d5ac776e787aa08ce10151042dc29b4ccb3af0930a3dd027bb6e4ee32974d939fa6e2e9607e4d3c18d780065a4aace5b5e65cf314f86c1fca1a3c13d6ab2e66b056eeba3ad047a5aab2914aefa6183399ec653c751704cce37", @generic="b7910f37ffee7ad67dd7daca7343c651625866326c9461e45e7f031cb84756f5b73802a034998597dcbdb749315f5d33c6720c6250bf5d5bd733d3979981b48b9505b268105fb02c000e9b3a3bed264c72f890fe8344818bc743ba2cf0df0acde11497c5ce2b7a9fe9c614d796e2331ab0abc75b40056c4a469e74aeecc1cc497bfdfec58cac838a9df57a2dd3e40c09cd8e0428478f92d9fd8d41cc58d5e67630a4bd105550195fab3c725b3f2dd1407a35f464dfcef302b83a09b69bf6cd881024586ea6cdaefda3fa7ef8627f0b", @typed={0x8, 0x85, @pid=r0}, @typed={0x8, 0x66, @pid=r0}, @generic="d75970cbd3d33ae2b84143f8701e47b922dea4397dc2a2870c8e83e25d322ce9a2b990538e7fdd858af0c0e2c83b0042fbc8f948273060c25da5d32501adc0b5ddb2bfbcc70954ee220d2a0ef9635198967ad6c7b8e63ea164f11b1f43bbc05f81b82688cdbd060774af29bce51c12cc1e7789d0b61a829e37b1978431c9edd4c26fb6c1e7fcee52424fca5612fd31808299531b05836c5c1c1747dd4b783252e92de5881a8cae2e5b26a635236cec809b5db135aabb868f83f074731abd4256b718d91738f730d19a6ff9037f467016645f7de5"]}, @typed={0x8, 0x92, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}]}, 0x25c}], 0x7, &(0x7f0000001d40)=[@cred={0x20, 0x1, 0x2, r0, r2, r3}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}], 0x48, 0x880}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000001e40)={0x0, @aes256}) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 89.709717] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) [ 89.720790] input: syz0 as /devices/virtual/input/input7 [ 89.767439] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure 20:48:28 executing program 0: syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000000}) 20:48:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1ffff, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:null_device_t:s0\x00', 0x23, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x800000000101045, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000100)=r4) poll(&(0x7f0000000080), 0x2000009b, 0xb30) [ 89.864132] input: syz0 as /devices/virtual/input/input8 [ 89.914828] audit: type=1400 audit(1544129308.757:17): avc: denied { relabelto } for pid=3977 comm="syz-executor1" name="UNIX" dev="sockfs" ino=10465 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:null_device_t:s0 tclass=socket permissive=1 20:48:28 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in=@remote}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setresuid(r0, r1, 0xffffffffffffffff) 20:48:28 executing program 2: r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) r1 = socket(0x400200000000010, 0x80000000002, 0x0) write(r1, &(0x7f0000000000)="240000002a0091000000000000ed7401000000ff01000000000000ffff01001511000b10", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c00070003000100000000006400000000000000000025000000000000000000000000000000200000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x188, &(0x7f0000000000)=[{}]}, 0x10) 20:48:28 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f00000006c0)="877f0c34c644eeceeeb502581f4d651e35989fc17ab6f000a94b5ad06f6d8d44b8fc7bc3fb35c052c3417e1dbe7afdad112e", 0x32}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000340)) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0x7, 0x33, 0x2}, 0x7) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x20000004, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75707c37222fd7e3", 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r5 = open(&(0x7f0000000640)='./bus/file0\x00', 0x280, 0xfffffffffffffefc) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) r6 = creat(&(0x7f00000003c0)='./bus\x00', 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='reno\x00', 0x5) write(r3, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000440)) creat(&(0x7f0000000300)='./bus\x00', 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b80)=ANY=[], &(0x7f00000002c0)) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r7 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x65) 20:48:28 executing program 0: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = open(&(0x7f0000000040)='./file0\x00', 0x101001, 0x1a) write$selinux_validatetrans(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='system_u:object_r semanage_store_t:s0 system_u:object_r:etc_mail_t:s0 00000000000000000116 /usr/sbin/ntpd\x00'], 0x6a) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x0, 0x3, 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:48:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xc000000000000000) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/55, 0x2be}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) read(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0xffffff5c) 20:48:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getscheduler(r1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x7}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x10000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/60) 20:48:28 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000180)={0x57, 0xa431, 0x1ff, {0x6, 0x101}, {0x3}, @rumble={0x7, 0x9}}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x9}, 0x8) ptrace(0x4207, r1) dup(r3) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x0, @broadcast, 0x4e22, 0x1, 'wlc\x00', 0x8, 0xd5}, 0x2c) ptrace$getregset(0x4204, r1, 0x1001000001, &(0x7f0000000100)={0xffffffffffffffff}) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x80010, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)={r4}) 20:48:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40200, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0xffffffae, 0x0}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000200)=0x2, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl(r2, 0x0, &(0x7f0000000100)="2a39089c349fa84338ec852d5acd6e") openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x88440, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000003c0)={@mcast2, r4}, 0x14) pipe2(&(0x7f0000000040), 0x80000) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0x6, 0x0, 0x200001}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tee(0xffffffffffffffff, r2, 0x9, 0xc) pipe(&(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x210) fchdir(r5) [ 90.072399] input: syz1 as /devices/virtual/input/input9 [ 90.108433] input: syz1 as /devices/virtual/input/input10 20:48:29 executing program 3: sync() r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = getpid() ioprio_get$pid(0x2, r1) 20:48:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x20, 0x0, 0x7, "071005feffa425b0f2"}], 0x20}, 0x0) write(r0, &(0x7f0000000440)="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", 0x1000) 20:48:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000000019, &(0x7f0000000100)=0x4001, 0x123) recvmmsg(r1, &(0x7f0000007c00)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}}], 0x1, 0x0, &(0x7f0000007dc0)={0x0, 0x1c9c380}) sendto$inet6(r1, &(0x7f0000000340), 0x0, 0x8001, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000180)={0x18, 0x0, 0x2, {0x100000001}}, 0x18) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffffffffffceb, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 20:48:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)) r3 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r3, &(0x7f0000000080)=""/151, 0x97) 20:48:29 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) [ 90.196559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pig=4009 comm=syz-executor2 20:48:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a8b878dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e769fd1d57d1b83e77d656f") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x381}) 20:48:29 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80001, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:48:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b80)=0x0) ptrace$getenv(0x4201, r2, 0x1, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) unlink(&(0x7f0000000140)='./file0\x00') getresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000180)={0x4, 0x1, 0x7fff, 0x1, 0x7ff, 0xffffffffffffd96a, 0x8000, 0x1}, &(0x7f00000001c0)={0xfffffffffffffffa, 0xb8c1, 0x0, 0xffff, 0x4, 0x6, 0x6, 0x6}, &(0x7f0000000200)={0x7, 0x2, 0x7fffffff, 0x6, 0x401, 0x6, 0x690, 0x3163}, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x66}, 0x8}) syz_open_pts(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) setreuid(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000b40), 0x4) 20:48:31 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x4}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x2, 0x7, 0x0, 0x1ff}, 0xfe, 0x40, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1, 0x1, 0x9}) 20:48:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000010f) readv(r0, &(0x7f0000000580), 0x3c1) getegid() open$dir(0x0, 0x0, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000001140)) 20:48:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x8000, 0x0) getsockname$unix(r4, &(0x7f0000000280), &(0x7f0000000300)=0x6e) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @remote}, 0x10) r5 = dup2(r2, r2) ptrace$getregs(0xe, r1, 0x2, &(0x7f0000000000)=""/124) getsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f0000000100)=""/160, &(0x7f00000001c0)=0xa0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000200)=0x4) sendto$inet(r2, 0x0, 0x0, 0x10, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000200000016) fcntl$getown(r5, 0x9) 20:48:31 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x94, 0x2, 0x1, "d46294b594590e0b675f3b1119f5c568", "7e3186c0bd1e404c9a50f5911a871060252ea83bf4c77e874227a0b950bf77eccfd432fb57f06baa9ce630535826989c5e3057c6291fe1d50f28a70c938a87bd12b9c004b7c46944947f211b6eaa7cecf6a6d7848d38ecb340a6e6da003f5f795a865f666d87296409c6f4b89d8c1fb52531b316f4db497c1f4cb26a52ad83"}, 0x94, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) 20:48:31 executing program 4: timerfd_create(0x0, 0x1) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x3, 0x7, 0x0, 0x800, 0x8, 0x8}) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:48:31 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200001, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) tkill(r0, 0x1000000000016) 20:48:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000010f) readv(r0, &(0x7f0000000580), 0x3c1) getegid() open$dir(0x0, 0x0, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000001140)) 20:48:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000010f) readv(r0, &(0x7f0000000580), 0x3c1) getegid() open$dir(0x0, 0x0, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000001140)) 20:48:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b80)=0x0) ptrace$getenv(0x4201, r2, 0x1, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) unlink(&(0x7f0000000140)='./file0\x00') getresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000180)={0x4, 0x1, 0x7fff, 0x1, 0x7ff, 0xffffffffffffd96a, 0x8000, 0x1}, &(0x7f00000001c0)={0xfffffffffffffffa, 0xb8c1, 0x0, 0xffff, 0x4, 0x6, 0x6, 0x6}, &(0x7f0000000200)={0x7, 0x2, 0x7fffffff, 0x6, 0x401, 0x6, 0x690, 0x3163}, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x66}, 0x8}) syz_open_pts(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) setreuid(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000b40), 0x4) 20:48:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 20:48:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000180)) readv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/102, 0x66}], 0x1) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000004000000"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/11, 0x2e4) ioctl$TCFLSH(r0, 0x540b, 0x7fff) syz_execute_func(&(0x7f0000000080)="3666440f9bf56664400f9f3241c3c4811dd9960f000000c4c27d794e00c421256463f010196f460f01d9f241e10e") 20:48:32 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="98338ed64872fcc25185ca8bd680b6269b472145c62edd7de7200eff0c60df96450d843035d6e373b48b7b9f9d18344f4acc772989277ccee2538af25d355eccafa1ec91f201945df115853a59ad3478a16582f6ee74e6ca519075ce6734fff992200a2ba7fab650dc35127cadc0a21ca1608274c5972cf88179e6651c9b8a6b7aab57ee12012dc1d63f433c73524a954aa1da683d467a7f46d2ad1a1e2eac60159861a6d41a2d5c5eaba09f8ac2b5", 0xaf) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xa0203, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 20:48:32 executing program 0: mknod(&(0x7f0000000240)='./file0\x00', 0x8040, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r0) 20:48:32 executing program 5: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000001c0)={0x100000000}, 0x8, 0x80800) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xc000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x8000, 0x0) getsockname$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x8) syncfs(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000014c0)=""/4096, 0xfffffffffffffdd9) 20:48:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e000000000000000000000000ecc0ac4f3311c0211a3e7ee21f38cdc063a4bf961aff29bcde847a274441b08b35194d115071c86610d4314a7129f0aa78f1cd30a69515bf75b2d2927b60313548bf1396fd9ac08edf1b36736d18fab8e3bd54fb2571bf2f2342ba24f770da3c2fbbcca983544f", @ANYRES32=0x0, @ANYBLOB="0000000000000000080011000000000010001200080001007674690004000200"], 0x38}}, 0x0) 20:48:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000080)={0x20, 0x0, 0x2, {0x1, 0x4, 0x8, 0x6}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000e0ff00000000c5e1e733bac57f14076b0e4829c1860cbac0453c274813c5c53470144c8768eed23fc1c42dfa053c0b222fe39249455bee"]], 0x0, 0x0, 0x0}) 20:48:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0xfffffffffffffffe, 0xff, 0x2, 0x8, 0x0, 0x0, 0x1000, 0x4, 0x9a5c, 0x1, 0x6, 0x2d, 0x4, 0x2, 0x4, 0x7, 0x1, 0xe90, 0x2, 0xfffffffffffff000, 0x7, 0x2, 0x2, 0x5, 0x1, 0x0, 0x10000, 0x2, 0x3, 0x0, 0x4, 0x6, 0x2, 0x8, 0x5, 0x8, 0x0, 0x3f, 0x6, @perf_bp={&(0x7f00000001c0), 0xd}, 0x20, 0x0, 0x4, 0x7, 0x62, 0xfffffffffffeffff, 0x1f}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x1) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffff) read(r0, &(0x7f0000000040)=""/178, 0xb2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0xa, &(0x7f00000002c0)=[{0xdaf, 0xffff, 0xff, 0x100000000}, {0x8, 0xffffe00000000000, 0xb8, 0x4e0}, {0x4, 0x4, 0x7fff, 0x9}, {0x7, 0xfff, 0x3, 0x3}, {0x7, 0x1f, 0x6, 0x3}, {0x101, 0x6, 0x1, 0x2}, {0x7f, 0x7, 0x6, 0x7}, {0x6, 0x9, 0x9, 0x2}, {0x100, 0x80000001, 0x20, 0xf99a}, {0x4, 0x6cd0, 0x8, 0x4}]}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x3, "17f99750e76490ae"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ptrace$setregs(0xf, r3, 0xb7, &(0x7f0000000440)="50297fb59abf986f2648e6d6bd246bc42420d3adc24d7f2a0138ac18") [ 93.329310] binder: 4146:4148 unknown command 536870912 [ 93.336425] binder: 4146:4148 ioctl c0306201 20000100 returned -22 [ 93.346488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor1'. [ 93.346955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor1'. [ 93.386792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 20:48:32 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_user(r0, &(0x7f00000000c0)={'system_u:object_r:dhcpd_state_t:s0', 0x20, 'unconfined_u\x00'}, 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x0, 0x80, 0xe57, 0x1ff}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000012000103000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001000120004000100767469000400020000000000"], 0x30}}, 0x0) 20:48:32 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x5ee000) 20:48:32 executing program 2: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x18b) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0) 20:48:32 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000000000000d85c9bf5"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '{cgroup\'\x00'}, &(0x7f0000000140)='ppp1systemem0wlan0r-selinux.)mime_typewlan0security$4\'cpusetselinux(:(\x00', 0x47, 0x1) sendmmsg(r0, &(0x7f0000007d80), 0x6, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x108) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f00000001c0)=0x200, 0x4) write$P9_RREADDIR(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11b) [ 93.575054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 93.584437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 93.597072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 93.606110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 20:48:32 executing program 3: prctl$PR_GET_PDEATHSIG(0x25, &(0x7f0000000000)) 20:48:32 executing program 0: r0 = socket(0x1, 0x2000000000001, 0x2) r1 = epoll_create1(0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 20:48:32 executing program 2: io_setup(0x8, &(0x7f0000000180)=0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x40000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x90002, 0x0) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x420000, 0x0) getpid() io_submit(r0, 0x3, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, &(0x7f0000000200)="d808f542e091911e12b9c66bad1f0e5c5f49bfa1e1c5df5d98c46fb364ca075dd4b025c5a6c5e9fcc8af9a15b41a1807ad2699d8ef304307fe2b7ec13fe8cf363b71b0e8ddc504fd4711b44a565a47", 0x4f, 0xfffffffffffffff7, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xffffffff, r3, &(0x7f0000000340)="6d921d0daefb5f94c7d865af", 0xc, 0xa56, 0x0, 0x0, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f0000000440)="4886ad1888fb7953f83124a2ea006bd9a16b6faa1dafb9c9d8b82bb658cb87654202d12f5194c958a36b47756732c14da64a0f75770b2ac0674f1b1c1e6fdef3", 0x40, 0x3, 0x0, 0x1}]) r6 = socket$inet(0x10, 0x3, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmmsg(r6, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001340)="30d5ba9899db60e96707d4678a5ad3977009c8fb0b2a47763177fa6435dc9336e0c5274bf0f9a9344e56231c84a73ec5edf93be19b95e338fe17022a8b7b6ef053fe762a66820f9101256a75499c1a628f8376fa2438320eac807a56d72f188fcca538ce80bc50a0", 0x68}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xe0, 0x8040}, 0x200}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @local}, 0x2, 0x3, 0x0, 0x4}}, 0x80, &(0x7f0000002000)}}], 0x2, 0x24000000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x10400, 0x0) 20:48:32 executing program 4: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x88}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x100000001}) 20:48:32 executing program 0: r0 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x9, 0x0, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x0, 0x0, 0x7ff}) r3 = socket$inet6(0xa, 0x2, 0x0) ptrace$setopts(0x4200, r0, 0x1800000000, 0x100048) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x1000000000, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) syz_open_procfs(r0, &(0x7f0000000040)='schedstat\x00') 20:48:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x10000, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) getdents(r0, &(0x7f0000000140)=""/80, 0x50) 20:48:32 executing program 3: timer_create(0x2, &(0x7f0000000000)={0x0, 0x20}, &(0x7f0000000040)) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, r0+10000000}, {0x0, 0x9}}, &(0x7f0000000180)) [ 94.141053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 94.168284] audit_printk_skb: 9 callbacks suppressed 20:48:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000100)={@empty, @loopback}, 0x6) 20:48:33 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x972) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) readv(r2, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x6b7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/121) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "e460c6853568af061d9348861fdb38841c489db3"}, 0x15, 0x3) tee(r2, r1, 0x400000000008, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) tee(r0, r3, 0x9, 0x0) [ 94.168303] audit: type=1400 audit(1544129313.007:21): avc: denied { net_bind_service } for pid=4280 comm="syz-executor0" capability=10 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 20:48:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x82) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000000)='posix_acl_access\x00', 0x6) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000040), 0x4) r3 = socket(0x2, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000eff4)) close(r4) 20:48:33 executing program 5: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000fed000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000000)="91ae8f2b573955e849dea64029fd7f43854f800191f33ed2b383a1defcf8bae0b3990a1583a3f8bdb26c3ce9209cd2c28fad784242d3e02036a4bd9a5eef3430b027622bd1f10a19acc5cf622abfe3eaacc9c352a8b723c88688a40ad78359ecf877cc35fc", 0x65, r0}, 0x68) prctl$PR_SET_MM_MAP(0x23, 0xd, &(0x7f0000000100)={&(0x7f0000fef000/0xf000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x10000)=nil}, 0x20000168) 20:48:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2, 0x1e, 0x8}, 0xc) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r4 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) io_setup(0x2, &(0x7f0000000080)=0x0) io_destroy(r5) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280)) creat(&(0x7f0000000500)='./bus\x00', 0x12) 20:48:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x44800, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000200)={0xa, 0x9, 0x100000001, 0x3}, 0xa) r1 = socket$inet6(0xa, 0x1, 0xffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x5c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) setsockopt$inet6_buf(r1, 0x29, 0x80000000000040, &(0x7f0000000140)="5730ab15f455a8399553555dd26de69835f2d807182d240e0c26bb23953560e244bd3bea1f6f7fc1177de53273740f64f6e3c066fa39a91f3d4bfb62fa308c3951697821ae1367563a030b051e487d1672be6673a87416ed56982cfa7aa87bdb4c1c457ff6a5a59eff5eb72ffc", 0x6d) r3 = dup3(r1, r1, 0x80000) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000040)) 20:48:33 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) flock(r1, 0x400000000001) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file1/file0\x00', 0x0, 0xffffffffffffffff) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file1/file0\x00', 0x4) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200)='./file0\x00') unlink(&(0x7f0000000300)='./file1\x00') ptrace$cont(0x18, 0x0, 0x0, 0x0) 20:48:33 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={0x0}, 0x10) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x400002, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000001c0)={0x7, 0x8}) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)="a96d55a756") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x210100, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="130000000100018b0000000008000000dc000000"]}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 20:48:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000200000016) 20:48:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "df474d6c3b4e02a2f1745465d7d5cf1e50197f578a6540233211686d16d92bf86b16"}, 0x26) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(r3, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000001740)=0xc) ptrace$setopts(0x4206, r4, 0x0, 0x100000) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) sendfile(r0, r0, 0x0, 0x2000005) flock(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 20:48:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r3 = socket$inet6(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = getpgid(0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x400, 0x9, 0x9, 0x18000, 0x7, r5}) r6 = dup2(r3, r4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20110000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x7}, [""]}, 0xf9}}, 0x0) 20:48:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="b1eb84c88f4cce2386ad473b82a8534dd67b74fe033d6ef3eda61efe27e42d78fc4310f510dce074627476ef032f519f0a052022ca23514ad0bd6a4475540df45e65be2f5bafa61534c306b71e385aa7e753686ae8a75bd7055d8abff9ba8409adc1e3413e4023d877cde065c79931add9aa7b04ced8eb314dc45f4cc3c60fb60ea3a57521c720c9da06c091e5b6930000000000000000000000000000"], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 20:48:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@dev}}, 0xe8) write(r0, &(0x7f0000000000)="3fbbaf11c96663cd2e6b282c6520737dca890d899e9412380dc388227b6add3c2cfed68d262b58019bf71860e732bae999ad16ec55245fa4e62e4e3d16d5b7e66c161b41df1fb4b35e6da655f1ad436f29a53fc32464629b642f265cfa6e46536a6a265f2799d1140d3a8e61f79dc7d6e9ccfb711bc08d0951111dd66ce1e414c12d50d240d6fa0c05d3bf4ed9db28e9b25bbdd812364d4c53", 0x99) [ 94.831368] blk_update_request: I/O error, dev loop5, sector 0 [ 94.837505] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 94.845171] blk_update_request: I/O error, dev loop5, sector 4 [ 94.851148] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 94.858949] blk_update_request: I/O error, dev loop5, sector 8 [ 94.864945] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 94.872609] blk_update_request: I/O error, dev loop5, sector 12 [ 94.879160] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 94.886901] blk_update_request: I/O error, dev loop5, sector 16 [ 94.892979] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 94.900613] blk_update_request: I/O error, dev loop5, sector 20 [ 94.906691] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 94.914358] blk_update_request: I/O error, dev loop5, sector 24 [ 94.920413] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 94.928067] blk_update_request: I/O error, dev loop5, sector 28 [ 94.934136] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 94.941770] blk_update_request: I/O error, dev loop5, sector 32 [ 94.947859] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 94.956347] blk_update_request: I/O error, dev loop5, sector 36 [ 94.962416] Buffer I/O error on dev loop5, logical block 9, lost async page write 20:48:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) write(r1, &(0x7f0000000080)="f70a76b54c1c0159192e1144f09d555bfff94c9982049305805b0ed81170e947498608cc2284c3664f47c11a196012538f8f20dcb79d84080090d51e2a3dde0700000000000000f02fb77a93981bdaf7f905ae4c8c92aece113c639629936253ab17ef91b5cfd4", 0x67) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 20:48:34 executing program 2: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0}) symlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000180)="ca6029ef996c1c7fa8d86d88b481e7461bd8d53696c0322643c4e6918ac137511f9852a04f889b8446788fa0773d20bb4916557d78a7bce9a7268019017ddd379b1388ccf4a8fc98e16055e1ed427ce4ad626b611ad2e3379f98ae8ad5cd6e90fd204478eb34de679a86b8caa91b12fb037d48e6860f3edca0a8ba7f90443f69d14a9f29f5f764d426362462b3d264f043bbe1b1b7f9366429c94fd00b10a63a7ab1c5bedc3b2bc22ca3c05b608a1d4d3cb8682c993a8653a4d685a136af7ce56efa1afd91e278a769a53c2660c10f0269f3075623e8590e3857e559c46ad10d47235ad68f73531d6d7a4c7e471c108429b83ee4567e34402ee8504bb5ad7f4ef6d72edc3412a7ae9b3b6c291017a66bcbd67f8030e2f3ca9731d3e6dcadb30be906d94010382ba1d061739f5a637963077864da06918a6cb3970d58f81aa96831b14817cb1ef1cb5f1e31abd969ccf954ba8366c004ed9491a2cd052b31871ed08d929abdb7dc62d005815d40f9eb24a69000582b39432efeca5ee324b71e45fdd1f82eec796356b7d786dd21929ea4cac2d2eac6905779ba8cb22dc9c3de37484176ee3869e5ba2cb9151df392bded75fd5a190cb2b69fc12fe12f4e4e313c4c639d96a4967d9749b5b265159824f2d4722a6b9c7b0de61c31435b7038fc1ebc81d2115b440a233289a1b5162faf47615517b93b4da2aecc149080414ed42ebd84602637bee91de88ac056a83f6c78097ae0dc9d1754e6efbf14e3f7f17d6d05fc83582babe6c1a2836320aa3bf976d1f8bce7e4b6ae4d69f12a4ea51af55f199bf313b730b4f259b84fb8445afe9f00360fa92efe1368a02ef92111853897597daa1dd3dc84966cfe2a81871378a3f7a5c4295af0de1f26b7970b1e784a0abdf8304fe0c6bd89a78d6ad5204573685b524f70d5a8620a7c37f0875affc939b8528fc793c32839da106d9f7046a88b9ab3a391c01ca18552db43eaeb6222ba0eb976454eeb1a502679fa8b4a614935b9944923a6e3721e3f043543aa5402f53c749b2063014f331d4194f62dd52940da9d33890b91a834ec815aadc5bd6a2af82714f3f4670fcf518d6ff10b5f9c10e725b0f961be128ef36d2bf6062525db73237872bf15bebd8c2ce574a507f3e6610c52a74085b91f1987dc288b7c4841992cce4c5b37d31cc8b56f726ab69f1f17587f4992ec71e2dbaa030466c4a9f5762f1243bcd6adaea40c580a38b7f1036dd9fedaffc6a61bc83fe5062f3a1e61a9d0e6d5618692af809a57f16f97db518322d337e16b327021b4e662f0c9ada419a46a1a8fc774c229aee3c9f027f81ef43bb94fcb8157badba71699d1f86478192c4e61499c7e718bd33883e3d687c84a0e12a17f9119181b845c1e4269a74707b1c2359d09392af5c5e156d548f9cdb70f5f62b0ba7b0ac0d06f5eba0c0c7181518c6bf2f14cd4ed029e4e4083aadf28524120a6aa06d1ff32bcbe3f3d9be97384bc558fde555b44a5d3418f2a17fa4e9d8e15edccfcdbefcf8756ada225af68341eadeb4ba8eca9bb3df3573ac3aa97b0e50a99fee6a0305836b1c03ee55ca3777eb7087c09596c9b01ab44d33cb270570cb05b10bd9c6eb8f04ffbb625f7fff1322985e688499f2b608f4228b0ef5966b7cb8b0fd4fba0abe8fd0c64f6f5ec76358a67955e8c28706d2bbdef68aeda294d9819a22f14f022cff44f28be529c9e588d2b4f17c4b905299dac499b5b1edd56a95127bca52822df56fb2ee145c17b5ef3683c1bc1a6855a7d64b5d2039a562298de0014b562e54d3b569f82b22047d6f225d9f4551b2e70dfa56298a62425e24c8893769fb031ed89b0633eb9999e988f0bc0fb2d4af9be06208972557dbda8623802fd946079e97d959120546eeabef1163d001a1c84c5b42bd6e2ff4d9cbe2a3f947f956d036802b0c164bcd2aba4d971a9cd382da04942115d4ecc825471df761a0afcc6989107d169aeafd5e8c9cbc51acd49c8532d9556ee9c8703519973af3f05a2d07c54eb0c8a694a1c28b212035f2b9cb1101d53b3ab830e4e6cbfc876d87839372c74d3ef67e4dfdded6d096ec651d321492c08ab402b2c2b9a785854d26be0049f0c58d7cbaa442c04b2b72fe4d63d3f7f144eeed77f646894b33f5f9bad3c758de84a47125aeca70471b25f52c23d6445af3e624fbd77edd996a2737d94cffd31c842d809dbb1d372862ce906050273e8b4d060382c89c7ac40172125d916b2a7170070c7d0790740f2456c722df25a41d0bec68f5fd864ce4c6fac9148c1ea8be280c138476350da07b11b8c696d970b51a8855ba18c0e13cc4a84787acc6be95f897fad46c2503eaa01becb764fa29ad92031e864fc4d64feb698c2f5bc184faada387b9e05bb22ff84be572baf5d0d70ab26d03501fa01334b10e9ff5cf4e7c2dd9198082786cd23c7448032e5d438d7b8a62c195536e99dc8192b62c08c129828bed1372b1d5ec4fe3fdd1b0b0c642f4e8188bb04aae3d03ec703df77e8287c20b3e5cd6cda9e1f1bd5bd27d6ace3b9a639b0c03515f59c8a558f66b3603339fe6721a159154667c1f28b414ed427ce758b7365f98f291bd854a6ac2e24533eb0ff417eed0526a0a8543ce67f9c0c247cb642cb6acf29d9d14581288fd8a87c265d49417f1f3ac07248a0e763ef5b6b88e259df6c8833278f44922b199e8595010bc3153b2ba7a3d80a80a6c5c529f07f12f103c47ff8a1e304bb60d6c88b186fb2513dd3e70c5614f498dc1140dd04d6b11a7beca1794d3f193eed98b2c610216d8a8c08ac9fdba4f5de212cfd3e29d43be0658a7bf8ac9ae24f7df97d6640a92255dcef3dffb563e3e7742a14b9a8ee165b583b7db7d1733e457fec87604f3bd9ebd2d72c5df6d39df3a09188057b30cb36f31bd89a6696f44df65f0221b7a90d1e8f9e2283fe0b50a66288fc8c3ce53f934dcdf48e9fbb945e6b45ede17fa64036b891fe42e14bbc2ae3ecae38a12d887ea5e682b865ff4302795c0d84566c8e102e726e41db382307bf8cd487e6df751bc02f59b5dc34efdd70e495b89d4391be0bb3df0f6010964a959f015356f63a374cdce76bbec5fde396586ddd296047e26b0a05723e0d5531aebb17984adffe1229a1a1337b03a63c5ac79d235dc50ff87dccc6a92a69cb82ac85a4036e957d0f179b1c79e9601d70aa8d165cc7a98181a3b6c925f96b65599e1f935686719186522a543bb64d25d8a38d7abe93e069b561135e7c3b8fcb69f4dcfaf80b750b0eecccd95fa907bc9d5095784be30dc9d45d7ae8fc61aa162632cb98dada5ed52773c588bf4c1836b366ee9a94b4fbb676be6b2bb88cdf98af6977aa1c2f012efb3b6375ce80a94f9ba2cb142a59551255ea8084a1d43abc6bd8263fc62b901c4e4544680bcb30c78aba1fc00e864d001775d676c077cfbf302b440c642d29b7f7b79bdcfae7b4b74278baf240045537b825510287131302e46333659159e0a2124d3b33de43838e7dc0866394bea829409248dc61a5c3a48ea0492309ab401fee6506ffed396ffbf79c4a0a3a057a59924a4342bf51f4e0c33570b607dbda9b844522af6b09fd27c63066abacc539c3cf593936aa50abe602eae46a7f9445fae5a1028dabbc55ceb902a6a30a1979009717986cb5049ee5deca4dd3a21f1eee2e5ed972959644f99320af31d883fdb4b217b0c53d232fffabde7aa84382cb560eb23b22fc2cca24179bf1d7fa5808ec00d368c06ba11e9cef2c2ad1905b258b0571c31aea37c888b3cadb47f76f39aeabed68c766161cd72a12b6acfcf3c5e04ee46964167c0b2d2b7619258c0a6d5f7089b5ddbe46a3df9a2e26f2946d8cd3dd9fa70a688757157b4070b7bcfde8f0d185bc7c0f16668a4e09950e497434c3e96febfdb99595a114733502c04d3dff2ba1441560fed0ba91979e9e60303fb2a66f32ae00844fd8771ca24de06723bd068f4a95ed785e2fd58147fff68bc44bec70fa6db1aef7e740ca8808c845a33d78b168acb81488d77a3ea7aa11a09688183333115515220e8f6be0a99b4ca1a091e528ff6b01fc9d97b3b306b849158306dc6bec7c8b4907a33858393c23ec80b72210b85e8cf73419f496e9e36f6317d8cdacc869725ebbec84a576b59e24f9e97f5ac07c954eefba7e62b62255456121717528137f4dcf3e19ad4b61f7aa3c9fb90f21f1f514ba97a22036558d38699bd3fe845e67963f816643514ce980e2be5d2349dfa343c2eea28037e34c1a363615edc74840def1456dc9a39497744b39c0e6ac748855c6cd597f9a2fe90535b6c67e3ffd14b512324b8adea2b568f8d7f872b9c21387333baa8134a7c00a350a41c229d97107dbef5be5dcbd9eb404de354d5c13755285888aed91b4096492a27fb156e528108074c549e1af8cfa28d25b75f2634af6e6440022e78575e726e5b49493086928c2cefe5f5fccf20de5dd4012163d27724cf288a3d7ce811dd222bab0bc74b35bb037c097a0025c70fb2e713961cc08583d853a584895d38d5357c3f2f056c08ee20f6ab03b3a1f09f878d237b24b437ef9adb9c1f0cd2d4eb9eedadb0c4ebc1a2c56887a1a8e5e79383c03946a257d03866bac37d4ad7175865482770e81a72bf78dcae977a71cfbc5239edd54dd64180903fc1ac5975a78c22fa224fc297fb6803ce77f0ba49d4975be6ca43d85a0f35041593e1e4c2f8945977f03da411a290274ac623e328fb1dbbbc6bed23f40fb55e5856a2f51f2629e74c93306f2a81666f8be8caedef2089034e7951154b5e2a1171263aa12ef3ea098040a7677b2226e02e64d024fa933edb5304a820c6699fd4415fd55eb903df956d8adc4c4350fb3167a906c1c71be95838a6668d0fc8bd5efdf6aa94199e5892e61838e77ef16e7a966e4f49436731f3880c25ef1535e2695c37168854fa30fd4e4bfb33e944a223106f2fd13baad05dcff93399945f03421ec715d8af2765206e8cbfedd8439f00b1122ec73d16a5f05ae42f4a3d097e675f0800cccec7d1c3699c7f1d32b345722b0477bbd4297177c3fc415f23d3a4d235d1dd498dc06e449bdf003a41cdf75b685ab8a08cc1147a3bbc9e27e85dc17a4f5e3458a4cc6e7f1a88e06131e3141c3ae28ffc7c53d9b5e5a76a88e476ee4bf7858bc98e327bf56b22692260ac815eca1f1055f7ae815990abecd8afee55d19841bf5c259df3d2f785923f3134288592af2bbf39f941c2fa334c03916ba973d040b45768104611534e04c91e07cff9a39c01a353bc2b8e5a454e6d96ed55ae7cb4e696a7c5d59d3cd13cbc719162c25f4233d5a92358150e7fafddbb0e03dabd5dec17e318cd0c08cbb07edf4f628f4b98c74bafbeea4c43f4a980635c1bf2a635ab8c00025c222f89e98b431b2a751262bba2bd6e4f6ef6e4c12345224e210e4a115a80bfb86f1574c12d20d6a90d59d78ac32121542e8dd271680a8a24b22ed5a58fb7d5265c91bc94a8aaa7c69e18e6c8a628611ea86cefc6c6b2b27343ddd74c0593f886d3d82569f2844c7abcb3e83fc59e259e62bfbefab321a5a0a6f2ac03d35e9c080959ce5ffe8b3015a0a7bc34d8474359a04ee4a9963ef69280ec35943ad563d08e562a92769507db355cab3ea377e123848aa46350173829412fee3d30974dc5abdf01acc98fbdcd84135ce9d139d6a128a1e4f1f3260165a42224a0ecd988c8b59feabbf32ea63f7b73b42fb323dc7105a26f58c0479c9e6075f62cd0ea0841d0647cec2871d1d6b250f58efef341f5d42e556"}, {&(0x7f0000001180)="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", 0xffeb}, {&(0x7f0000000000)="e9fb55b3435a295c07c8c10d2810ea69ff25973aee688c9a3c9c2364bf3403495dbd9f1a345d7419633490366a37f1d1de384b73580466b579f4ec17"}, {&(0x7f00000000c0)="19057c70bf60c3d192c5717ca24b562e0e5d77df0c70c73bffefbade8eed014d1908f384178eb705da3304ee847a3954504f29fe44d56b4540"}, {&(0x7f0000002180)="5960e72d91eb163841f30ab500d31cf79694e95cf384ff630a5de8b23fcc253795876fd05544ab347e7f9cfd8c5ab7e8f39ffdf92d49f44f1abb7a7b7bd70305ca64755bbd5d466341869898c62e1b34face2f9a0a11ceadab2f525f2c3ecccc75225d0fc798f1dc5f48344fdf5697284bf79df587a993accdae4881a974741ef935f7963837"}, {&(0x7f0000002240)="950019affa6cc61f01ee2a3d745b383b47daef76ef1335a8d926785161e6835a12940604f28c9dadd012efa5320826186a552ea0495fbf2cff61e36e45385d13ad4a73e274673a6d2c9325d7ada5e1e022f95ac4c58ad520f65310ee98dbf43d575cdf7390da219d1616e0a15546aa48b0c8629b526e8bec61a30fee22d6bae4dcde3a93bc5515729e620a7306bc94ceb5101cd049edb6a0e61c83d104377220d0dd6140e488093f949b8fcbd1da608cadc7608e93d590a325a80be7428b2311ed5da9bfab432082aae7e57f1673e8f8792dc237f43c3c14949d0d3c5743777424f87969572a2516f3393c6080979809ec732cdb39ced3d9"}], 0x0, 0x0, 0x103}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 20:48:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) 20:48:34 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)={'syz0', "73befaefbc05394b93dc674bda9fee4ad181de565c1f80b1d92b5247722e7c21adcefce14463b6bc6138391c671f044564f1fef49fd3"}, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7ff, 0xb) 20:48:34 executing program 0: set_robust_list(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x18) r0 = socket$key(0xf, 0x3, 0x2) getitimer(0x3, &(0x7f0000000000)) fsetxattr$security_smack_transmute(r0, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0xffffffffffffff67, 0x3) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0xffffff28, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0c}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x16, 0x3301, 0x0, 0xb, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_key={0x5, 0x8, 0xc8, 0x0, "a319c8ce7a750ebfbe9a8ba7de2681decf18d5ef2790cab778"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_ident={0x2, 0xb, 0x6, 0x0, 0xffff}]}, 0x58}}, 0x20000000) 20:48:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="152c6234488dd23c766070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="071f080000000000970600c6fe76cff3e26def23000200000811000013", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0x1000) 20:48:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa800, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) rt_sigaction(0x0, &(0x7f00000006c0)={&(0x7f00000007c0)="cf659c266747d9b314ad0000c4a2ad81b466f20f79ffc4614573dfa4c4a1e1e501d9f72e36f7620c46dc94ad060010c4a221ba23", {0x4}, 0x0, &(0x7f0000000d80)="410f380a9aa4100000f3450faec466460f383144b90bc40205ae761ac4224bf5e7c461396cc58fe848cdebccc4a14d56cef340afc463f95d470058"}, &(0x7f0000000600)={0x0, {}, 0x0, &(0x7f0000000700)="0f0fc9a6f0836ff500c4e1111457a0643e64420ff5cac462a0f30bc462490ac566410f38dcc166460f3a0ae800f3a303f6d0a400000000f0440fbab51a000000bd"}, 0x0, 0x0) clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) unshare(0x20000000) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000c35ffc), &(0x7f0000000140)) ioprio_set$pid(0x30000000002, 0x0, 0x800004000) wait4(0x0, 0x0, 0x40000000, &(0x7f00000002c0)) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0xa, 0x4) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000340)={0x7fffffff, 0x0, 0x5, 0x0, 0xffffffffffff7fff, 0x400000000000009}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000002c0), 0x27f) write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="02030000070000005b000000fff55b4202938207d9fb3780398d5375000060007929301ee616d5c01843e065900800", 0x2f, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000005c0), 0x10) close(r2) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) 20:48:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b40a000000000000470000000000000095000f0000000000"], &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x880, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') 20:48:34 executing program 5: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x48000, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @broadcast}, 0x6800, 0x2, 0x2, 0xa, 0x3, 0x6, 0x5}, 0x20) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) 20:48:34 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000100)=0x80) getsockopt(r0, 0x4, 0x80200000000000, &(0x7f00000001c0)=""/171, &(0x7f0000000140)=0xab) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x4}, 0xfffffd5d) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000180), 0x4) connect(r2, &(0x7f00000002c0)=@pppol2tpv3, 0x80) 20:48:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) r1 = memfd_create(&(0x7f00000000c0)='eth0\\selfem1eth0:trusted\x00', 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x69a, 0x8, 0x1, "e29789c8bc1c9450eb964ebba5943d2ceadcc3b8c6e82fdb23b28545a374f12fcca391940a01f68340199c63242bf185b585222940193b118f1f098f8ef315fca9b6668ecc55e11af397a1d112be5965"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e22, @broadcast}}) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @multicast2}, &(0x7f0000000140)=0xc) 20:48:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f000046eff0)={0x6, 0xda}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)="b375db6558b9c526b9ef9519dc20455bd836c74bda3c185bf108d48e8c7ba77594cb80ee7cf3fdda6f2b0941547938cbd62322130e8ab7ae94ccef672fd35356d03eaf5d66afc40bccd0ad7ad6dbd599a05bd191b5838bc235ca94c7566001f8e63f099f1825f6ba5e715e51cd3917e42544fb1a38a0fb75e5baa7543c2248a7d5f04f44fa7bd889cd4039051f6419d301f9d4a12fbaa2ae39e97920c2b239d8dac60a71426ac35a4fa56a76e6d42dd354b5f1a3b5eebf") fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) getgroups(0x4, &(0x7f0000000380)=[r3, r4, r5, r6]) 20:48:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x10080, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x414000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x2800, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x20040811}, 0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xff, 0x9}, @sack_perm, @window={0x3, 0x7, 0x7fffffff}, @sack_perm, @mss={0x2, 0x10000}, @timestamp, @timestamp], 0x7) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) ioctl$sock_proto_private(r3, 0x0, 0x0) 20:48:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000e40)="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", 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000d0ca96fb67c40800a852e9664cd68243e81cfcb4f1353f030a0000000000000000000000002ef7de5c000000000000000000"], 0x3a) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 20:48:34 executing program 4: getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) r2 = socket$inet6(0xa, 0x0, 0xc270) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7ff}) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000440)={'broute\x00'}, &(0x7f00000000c0)=0x78) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x3, {{0xa, 0x4e24, 0x100, @loopback, 0x3}}}, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) write$binfmt_misc(r1, &(0x7f00000004c0)={'syz1', "f8ba3ef39db1d789b0f039e432bf1913fade5c67b308b8f0cbcd98cc5327dc409424c10c483e73a1f9de109c677cf868e1ee9cc40828976459ff554f4100fd3833808f60e873e56d2fa57334a8492b6ed35b71ec94f1def3ae1f29735e22dbe19fb62c85769bc0b7c3fc5f63cba618aae82e4b48feb8b4df4d13cb019635df46f54b3281e9568eb0a374034bbb34fcf9d7ce01ff3d441cdbbaa23e4f690a401e0acf3f4d19fbc941c2b6b3e801102c85f71660f8c65225a6e83197868e4f046c88b7c41315401fc9669c7f925a6ec1d63408265cea8a620ac57cc7"}, 0xdf) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 20:48:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @multicast1, @broadcast, 0x2}}}, {{@arp={@local, @rand_addr=0x7, 0x0, 0xffffff00, @empty, {[0xff, 0xff, 0xff]}, @mac=@random="2d9654ebd3d1", {[0xff, 0xff, 0x0, 0xff]}, 0x20, 0x6, 0x53, 0x7, 0x80, 0x81, 'ip_vti0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @remote, @rand_addr=0x80000000, 0xf, 0xffffffff}}}, {{@arp={@loopback, @broadcast, 0xffffff00, 0xff000000, @empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, 0x6, 0x81, 0x7fffffff, 0xb5, 0x4, 0x7ff, 'syzkaller0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x10}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x1b}, @empty, @broadcast, @broadcast, 0x5, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, r2/1000+30000}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000fe0)={{0x100000000000}, {0x77359400}}, &(0x7f0000018000)) 20:48:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl(r0, 0x6, &(0x7f0000000040)="ba4e88045c7f15dfefcfa7370472379c9c70d5077bcca4a7a7dbb9ea417eb73aaa3819eed296ea1083eef354be6ef6680deda2bb59e6c77f207e883ae9764e9da362e5a11900170331e63115edb72c61fc159e160bdfaeb70bd62f9b91c347313664755395f51c80cd54461db2176d817a7d3915bb1913341fcd992de8c467f1a61e9f97342277eeb244a6cb7e7f38630a3f30661fc724cdc43526c34da463cb0775326e2926c35179a4c8e5fe") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000000)) 20:48:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000040)=""/11, 0x155) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) 20:48:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[]}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 20:48:34 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="d556c36a10365716ef4f4d65588f8e90fa90dd6c00de00ad131f0aba88630dec416eea91aabd01baa8c110cb", 0x2c}, {&(0x7f00000001c0)="e90ac691987a24b70b0d992d587208a4a0ffe46dc4404fa8f75cfab8c0fb9b1a7aa63b3b34ed0f9aa96a2b12b66185ae5f", 0x31}, {&(0x7f0000001540)="e096c1ead0f464fd7eba45fbf2a6cd669d2711dd7d27977a85dd532ce618600b5bb6ba0bd1f94507312e85291dc53157175f2accde27e9c3822c0ff693eb454ed9f002161768111816f3d120c87f36e28e226bfd33476d5ee3ff3f4843c7996c1fd8a815910e24db8e897ade0fee6b6a4f02c3a633125f853bf70920aff29000423c150c84cd18620b790f90c32b900f13dfe48f0e36fcac4db64d5c8677819a0d16b62da361133c735d6f2d97607456cd9cacb8c1ef6820e4b50e6c91c028263158d3b0fd9ea4b24576d7386ac27ab3791f696a867d36421c8086f5d7d40b4d24b93c978e86e7ae3d60b18051a4beb18399ac5613", 0xf5}], 0x4, 0x1e) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000013c0)={'erspan0\x00', 0x200}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/20, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001500)=0x1) sendmsg$nl_route(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@getneigh={0x14, 0x1e, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f00000000c0)={&(0x7f0000000380)=""/4096, 0x1000, r2}}, 0x282) dup2(r0, r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) 20:48:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigaction(0x23, &(0x7f00000001c0)={&(0x7f0000000000)="c461fc1053dbd8e0c4e2052cb3f4000000f3460f166100c442dd9e97949900008f8878ef27dbc40165e50503000000c40135f37099c4237d3993431bce67b82e0fd9b6938d0000", {0xfff}, 0x0, &(0x7f0000000100)="c4a29129980080ffff6766f3440f5feac44379634e00cbf009852463c64ec443f121caf4670fbaaf42000000f943da11f3450f7fda260fd7cd66440f5fbb05000000"}, &(0x7f00000002c0)={&(0x7f0000000200)="65363646d9edc4e17973df98c42119d5f66764d83485d7ba0000c4a16d60e9661147ff6766400ffa10f2430f38f15b07c4e290f2b5529d0000c4c27d584900", {}, 0x0, &(0x7f0000000240)="c421fc11c8c4a3b90cd22cc461a45615feefffff66470fd7ddc4417a124bd1440fea16c48179f7e9f36567674281775e19000000c4a279343d620000008f89c89295f4ffff1f"}, 0x8, &(0x7f0000000300)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x6}}) 20:48:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0)=0x1d, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0xd) 20:48:34 executing program 3: futex(&(0x7f000000cffc), 0x8c, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) 20:48:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/113, 0x71}], 0x2, &(0x7f00000004c0)=""/168, 0xa8, 0x5}, 0x2}, {{&(0x7f0000000580)=@ax25, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000600)=""/188, 0xbc}, 0x8}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/121, 0x79}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/49, 0x31}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x5, &(0x7f0000000a00)=""/157, 0x9d, 0x3}, 0x5c9}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/64, 0x40}, {&(0x7f0000000b00)=""/50, 0x32}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/247, 0xf7}, {&(0x7f0000000d40)=""/33, 0x21}], 0x5, &(0x7f0000000e00)=""/238, 0xee, 0xfffffffffffffe4a}, 0x1}, {{&(0x7f0000000f00)=@pptp, 0x80, &(0x7f0000002680)=[{&(0x7f0000000f80)=""/160, 0xa0}, {&(0x7f0000001040)=""/234, 0xea}, {&(0x7f0000001140)=""/112, 0x70}, {&(0x7f00000011c0)=""/220, 0xdc}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/162, 0xa2}, {&(0x7f0000002380)=""/140, 0x8c}, {&(0x7f0000002440)=""/149, 0x95}, {&(0x7f0000002500)=""/222, 0xde}, {&(0x7f0000002600)=""/123, 0x7b}], 0xa, &(0x7f0000002740)=""/70, 0x46, 0x5e}, 0x8}], 0x5, 0x0, &(0x7f0000002900)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x7) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bind$packet(r2, &(0x7f0000000280)={0x11, 0x1a, r3, 0x1, 0x1, 0x6, @local}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x34, &(0x7f0000000140)={0x0, 0x0}, 0x4) 20:48:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffffffff, 0x100000001}]}) 20:48:34 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) r1 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='%wlan1\x00', 0x7, 0x1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x76}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x2, 0x6, 0x914, 0x40, 0x6, 0xffffffff}) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, r3) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 95.614853] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 20:48:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) clone(0xa0000100, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2e1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x1, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) 20:48:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f0000001640)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) select(0x40, &(0x7f0000000000)={0x1, 0x4ae, 0xd881, 0x10001, 0x6, 0x8, 0x6, 0x10000}, &(0x7f0000000040)={0x10001, 0x4, 0x1bf8000, 0x3, 0x4, 0x1000, 0x1, 0xde}, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x6, 0x293e40000000000, 0x3ff, 0x400}, &(0x7f00000000c0)={0x77359400}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 20:48:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/77, 0x4d, 0x10000, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0xb604}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000003c0)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000400)={0x67, 0x7d, 0x1, {{0x0, 0x49, 0xfff, 0x0, {0x0, 0x1, 0x8}, 0x4c080000, 0x1, 0x0, 0x945, 0x9, 'net/udp6\x00', 0x0, "", 0x0, "", 0xd, ':-,)eth1$ppp0'}, 0x9, 'net/udp6\x00', r3, r4, r5}}, 0x67) sendfile(r0, r2, &(0x7f0000000040)=0xf0, 0x2) 20:48:34 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xda91) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) getpgrp(0x0) fsetxattr(r2, &(0x7f0000000180)=@random={'os2.', '\x00'}, &(0x7f0000000240)='syz', 0x3, 0x2) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000380)=""/129, 0x81) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x9, 0x4ffc, 0xfffffffffffffffe, 0x1000, 0x1, 0x6, 0x58, 0x2, 0xb90}}, 0x43) fcntl$setownex(r1, 0xf, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 20:48:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x121010, r1, 0x0) io_setup(0x80000001, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400000000000, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$inet_buf(r3, 0x0, 0x37, &(0x7f0000000180)="39d2124885e668a238665a4d6fbfb47b7aef09f7bd0a8d266691d24c3d6dd7c95b7cf474b136a2be1187122358fbfc646b4f4ddbd25cb41a5232cd4e0003ff031ee5e915b07391e5e82f4c997e1a6ed8820770eb1e3c52d9ee3cade982444728d4a4c35e853bdf2b57049f4b7436f1c81305ce7f71a59ca7d4534bf0a19fdd23b93807d1c15b6609db88896085d58195e7897df7b99d541c162726bbe87026d0a90e8fcef768c3be93100f11f0aabe98cca99a4c52a3aedba357335d80bdcb5cec68b8d71d56ab011fab", 0xca) 20:48:35 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001fc0)="480000001400199009004b0101048c01020000ebbd2e2ab9b4440000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x7fffffff}, 0x28, 0x3) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000040)=[{}], 0x0, [{}, {}]}, 0x98) 20:48:35 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040), 0x4) 20:48:35 executing program 4: epoll_create(0x7a) inotify_init() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) 20:48:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', 'ppp1\x00'}) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x1000000e8) fcntl$setstatus(r1, 0x4, 0x46c00) getgroups(0xfffffffffffffe0e, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x8, 0x9, 0x44756336, 0x1, 0x1ff, 0x7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 20:48:35 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2008000, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_gt={'euid>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat'}}, {@audit='audit'}, {@subj_role={'subj_role'}}]}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xffffff80, 0x0, @in6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) 20:48:35 executing program 1: fchdir(0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000002c0)="8bf51c5f956b2df4b709494839ce710fc64b198c787aa4478758dfa5eb06720b622de1310cbdf6f354ab2374f4700a3d12f464828e8fc4b775351f488c3d764fb4227ee6244e2e3680625e77d32dd30cc99fe03d81f353ba14780c359ec51e1c03f8cf7c86e6b1a7386942d4947d01549182a0159807305f2a211f74492fdcf8b926f557677e96c093a8a681451bb55232b6e15a00dbab3dd9c706d763e396b0c9b48da4", 0xa4, 0xfffffffffffffffa) keyctl$describe(0x6, r0, &(0x7f00000000c0)=""/91, 0x5b) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x1) 20:48:35 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$smack_current(r1, &(0x7f0000000000)='vboxnet0]\x00', 0xa) ptrace(0x4206, r0) tkill(r0, 0x37) 20:48:35 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() syncfs(0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) setsockopt$inet6_buf(r2, 0x29, 0x49, &(0x7f0000000080), 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000530100004157e974b3187d8e80431e724468751e9e70de46800df85ef91a5f0bbcde0276a136e2add9f6d2adb12e692a923eb1919d6997a8b93c31786f788f0986a87f2a2f5ca82a49d4b76e4fadd9a46eb4b4a53a489b56b2a5c20b1fb28d486ee3446e6843096dea620e850b6e034cc03fe0dc52db7f41cb37c2e47c1ce103c7d866c621e56fa20cc306a36de4b9fb6ad70ed07cdf68aaffffffffffffffff86a188a2ccf00c5805a44d5836d42893"], 0x90) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) socket$nl_route(0x10, 0x3, 0x0) [ 96.854641] binder_alloc: binder_alloc_mmap_handler: 4551 20001000-20004000 already mapped failed -16 20:48:35 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvfrom$inet6(r0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0xfffffffffffffdbe) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 20:48:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) dup3(r0, r1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000480)) 20:48:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x1) 20:48:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x1000002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000d00)='trusted.overlay.nlink\x00', &(0x7f0000000d40)={'L-', 0x8001}, 0x28, 0x3) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/56, 0x38}], 0x1) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000180)=""/107) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) openat(r1, &(0x7f0000000000)='./file0\x00', 0x80, 0x60) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3, 0xd, 0xc, "45f0fa7f4ab06f648c9849d64a0665b0281707dae7f92a49731c25164a2ec1086dbc16ac85c29eb33b7a46b58c8e8f55781bfe3178c180c09a879e140861e51d", "6873de9e65d7b2635dfe2b94745b5bcd3041b4bb8103c1167406c4d85bcfd719", [0x401, 0x888]}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 20:48:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xd0, 0x32, 0x10, 0x70bd26, 0x575, {0x6}, [@generic="b4b8d5def1ce82a062209cfb62c02b8633b08d642aab2351b2b2f91c218f1e453a079841ff41fe1debc3dec2c1a5222b9bc1002026e2619bbb467b0ec9009872e3d2520983dd18de7eda38e4f034fb1935771cc0a21908da9ca56bf7f9e703812ce04d4fda79b57aea685b2adab6eb2188e1bf79ea5a8350529c3a3353ad5b7942a91a97d61615cb04da1260f521d783e5a8bd0acd58062df60cd9d53631c42f9bbfa9dbf5bc4e51c662c2975a69a36bd9e12d4217969abdc70e98"]}, 0xd0}}, 0x8000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50}, 0xffffff30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)) splice(r2, 0x0, r1, 0x0, 0x6160, 0x2) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3ff, 0x100) dup3(r2, r3, 0x80000) 20:48:35 executing program 5: clock_adjtime(0x0, &(0x7f0000000f30)={0xffffffffdffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 20:48:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0x170) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) socket$inet(0x2, 0x1, 0x80000007fff) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00005c8000), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2) syz_open_procfs(r3, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab500fe3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 97.003677] input: syz1 as /devices/virtual/input/input11 20:48:35 executing program 0: mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000002b80)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100001000000000000000000000a50000d8189d20a14136391aefd553a811e3df28e192632edd45e5897fc755ad9c1f8919ac769c6d8a4e3b0be7105e3b560a1ed8da4a094fd0677e240be44d1c19ac87b0431b2dcc2bb0d692140e3ef0031f0d98caed7a289c8cd216ff5f501820d4d054759", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970365f7674693000000000000000000c000100aaaaaaaaaa000000"], 0x40}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x2, r1) 20:48:35 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x100, {{0x2, 0x4e24, @rand_addr=0x100}}}, 0x88) socket$inet(0x2, 0x7fffe, 0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0f85403, &(0x7f0000000140)) 20:48:36 executing program 0: r0 = socket$inet6(0xa, 0x2100000004, 0x9) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0xffffffffffffffff, 0x0) [ 97.107229] netlink: 32 bytes leftover after parsing attributes in process `syz-executor0'. [ 97.117645] netlink: 32 bytes leftover after parsing attributes in process `syz-executor0'. 20:48:36 executing program 4: r0 = socket(0x11, 0x400000003, 0x0) r1 = dup(r0) accept4(r0, &(0x7f00000005c0)=@hci={0x1f, 0x0}, &(0x7f0000000640)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xa, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1000, 0xf, 0x4, 0xb, 0xffffffffffffffd8, 0x10}, @ldst={0x1, 0x0, 0x1, 0xb, 0x4, 0x0, 0x4}, @jmp={0x5, 0x53078871, 0x3, 0xb, 0xb, 0xfffffffffffffff8, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f}, @ldst={0x3, 0x3, 0x1, 0x7, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff92}, @map={0x18, 0x0, 0x1, 0x0, r1}], &(0x7f0000000100)='GPL\x00', 0xfffffffffffffffd, 0x46, &(0x7f0000000140)=""/70, 0x41100, 0x1, [], r2, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000100)=ANY=[], &(0x7f0000f6bffb), 0x0, 0x7e, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) 20:48:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x80000001, 0x940) clock_gettime(0x0, &(0x7f0000000040)) ppoll(&(0x7f0000000080), 0x66, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) rt_sigtimedwait(&(0x7f0000000100)={0x5}, &(0x7f0000000140), &(0x7f0000000180), 0x8) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RCREATE(r1, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x8}, 0x3}}, 0x18) fcntl$setsig(r0, 0xa, 0x35) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x2, 0x440000) 20:48:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x3) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000004000020058", 0x1f}], 0x1) 20:48:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0x170) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) socket$inet(0x2, 0x1, 0x80000007fff) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00005c8000), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2) syz_open_procfs(r3, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab500fe3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 20:48:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0x10179) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000002c0)={0x80000001, 0x3, 0x5, 0x0, 0x0, [{r2, 0x0, 0x3}, {r0, 0x0, 0x7}, {r2, 0x0, 0x15}, {r1, 0x0, 0x4}, {r1, 0x0, 0xb5d3}]}) unshare(0x24020400) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r5 = getpgrp(0xffffffffffffffff) fcntl$setown(r3, 0x8, r5) getgroups(0x9, &(0x7f0000000100)=[0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00]) write$P9_RGETATTR(r1, &(0x7f0000000480)={0xa0, 0x19, 0x1, {0x4, {0x24, 0x4, 0x5}, 0x100, r4, r6, 0x7, 0x5fe, 0x0, 0x3de9, 0x5, 0xab, 0x9, 0x5, 0xffffffff, 0x3f, 0x2, 0x7, 0xfffffffffffff801, 0x3ff, 0x3}}, 0xa0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 20:48:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0xfffffffffffffff9, @remote}, 0xf84eef3129ba5441) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x20, {0x3}, {}, @ramp={0x2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001400090100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060000000000040000000000000000000000000000aa00000000000000000000000000000000"], 0x40}}, 0x0) memfd_create(&(0x7f0000000200)='\x00', 0x6) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @broadcast}, 0x8) 20:48:36 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x28) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000080)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 20:48:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000001800000002000000000000000000000002000000000000000000000000000001ac1414bb0000b4030000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 20:48:36 executing program 3: unshare(0x2000400) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) 20:48:36 executing program 1: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0xffffffffffffffff}, 0x2c) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v2={0x5, 0x2, 0x9, 0x432, 0x95, "3a7d14846e230989bc35d0528f3c88f6564638d40dff95dd11c5f8398b6d312b48f94c95fb384adf8ac2b057668b947ceebf835f63627a0b8ffb77a87c891ef5789dd9cf8454460856096942fe53ae0f1acace9039e291903d40c04dd3e70c5042e7658a812d853f906299d727c3ee6cb9495335d898cbcab7ddb94657f9c9bcaedc59691296a501615c3a4cbcae96a070a399a2db"}, 0x9f, 0x1) [ 97.889608] audit: type=1400 audit(1544129316.727:22): avc: denied { write } for pid=4655 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 20:48:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x57, 0x0, 0x20, {0x3}, {}, @ramp={0x2}}) socketpair(0x4, 0x80006, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2f, 'memory'}, {0x0, 'rdma'}, {0x2b, 'memory'}, {0x2f, 'io'}, {0x2f, 'io'}, {0x2f, 'memory'}, {0x2f, 'pids'}, {0x2f, 'io'}]}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0xff12}}, 0x0) 20:48:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'lo\x00', @ifru_flags}) 20:48:36 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"6c6f0040000000000000f7ffffff00", 0x2}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x2, "c21486f34bc02317"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={"6c6f00fffffff500"}) 20:48:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x40000000019, 0x0, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40a00, 0x80) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8040, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/213) 20:48:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'veth1_to_bridge\x00', {0x2, 0x4e22, @rand_addr=0x2}}) rt_tgsigqueueinfo(r1, r2, 0xe, &(0x7f0000000040)={0x28, 0x1a76, 0x1, 0x1}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 98.013948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pig=4690 comm=syz-executor2 [ 98.015868] syz-executor1: vmalloc: allocation failure: 17179869180 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 98.015877] CPU: 1 PID: 4681 Comm: syz-executor1 Not tainted 4.9.141+ #1 [ 98.015890] ffff8801cb29f788 ffffffff81b42e79 1ffff10039653ef3 ffff8801d52d97c0 [ 98.015901] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801cb29f8d0 [ 98.015912] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 98.015914] Call Trace: [ 98.015928] [] dump_stack+0xc1/0x128 [ 98.015939] [] warn_alloc.cold.31+0x7f/0x9c [ 98.015949] [] ? zone_watermark_ok_safe+0x250/0x250 [ 98.015958] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 98.015967] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 98.015976] [] ? check_preemption_disabled+0x3b/0x200 [ 98.015985] [] __vmalloc_node_range+0x35e/0x600 [ 98.015994] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 98.016001] [] vmalloc+0x5b/0x70 [ 98.016010] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 98.016018] [] xt_alloc_entry_offsets+0x41/0x60 [ 98.016027] [] translate_table+0x2bb/0x1ba0 [ 98.016035] [] ? trace_hardirqs_on+0x10/0x10 [ 98.016043] [] ? retint_kernel+0x2d/0x2d [ 98.016052] [] ? arpt_do_table+0x16d0/0x16d0 [ 98.016060] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 98.016068] [] ? __might_fault+0x114/0x1d0 [ 98.016077] [] ? __check_object_size+0x248/0x38e [ 98.016086] [] do_replace.isra.7+0x1cc/0x470 [ 98.016094] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 98.016104] [] ? compat_do_replace.isra.6+0x4f0/0x4f0 [ 98.016112] [] ? selinux_capable+0x36/0x40 [ 98.016122] [] ? ns_capable_common+0x12a/0x150 [ 98.016130] [] do_arpt_set_ctl+0xff/0x140 [ 98.016139] [] nf_setsockopt+0x6d/0xc0 [ 98.016148] [] ip_setsockopt+0x88/0xa0 [ 98.016156] [] tcp_setsockopt+0x88/0xe0 [ 98.016165] [] sock_common_setsockopt+0x9a/0xe0 [ 98.016173] [] SyS_setsockopt+0x166/0x260 [ 98.016180] [] ? SyS_recv+0x40/0x40 [ 98.016189] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 98.016197] [] ? SyS_clock_settime+0x220/0x220 [ 98.016205] [] ? do_syscall_64+0x48/0x550 [ 98.016212] [] ? SyS_recv+0x40/0x40 [ 98.016219] [] do_syscall_64+0x19f/0x550 [ 98.016228] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 98.016231] Mem-Info: [ 98.016250] active_anon:52769 inactive_anon:2911 isolated_anon:0 [ 98.016250] active_file:4192 inactive_file:10525 isolated_file:0 [ 98.016250] unevictable:0 dirty:23 writeback:0 unstable:0 [ 98.016250] slab_reclaimable:4562 slab_unreclaimable:59864 [ 98.016250] mapped:58042 shmem:2918 pagetables:1119 bounce:0 [ 98.016250] free:1456365 free_pcp:357 free_cma:0 [ 98.016277] Node 0 active_anon:211076kB inactive_anon:11644kB active_file:16768kB inactive_file:42100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232168kB dirty:92kB writeback:0kB shmem:11672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 98.016296] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:636kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 98.016325] Normal free:2805996kB min:5580kB low:9168kB high:12756kB active_anon:211076kB inactive_anon:11644kB active_file:16768kB inactive_file:42100kB unevictable:0kB writepending:92kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:18248kB slab_unreclaimable:239456kB kernel_stack:4896kB pagetables:4476kB bounce:0kB free_pcp:760kB local_pcp:324kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 98.016383] DMA32: 2*4kB (UM) 2*8kB (M) 1*16kB (M) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB Normal: 3787*4kB (UME) 2606*8kB (UM) 2179*16kB (UME) 81*32kB (UME) 190*64kB (UME) 69*128kB (UM) 46*256kB (UME) 13*512kB (ME) 8*1024kB (UME) 3*2048kB (UM) 654*4096kB (M) = 2805996kB 17646 total pagecache pages [ 98.016438] 0 pages in swap cache [ 98.016442] Swap cache stats: add 0, delete 0, find 0/0 [ 98.016444] Free swap = 0kB [ 98.016446] Total swap = 0kB [ 98.016449] 1965979 pages RAM [ 98.016451] 0 pages HighMem/MovableOnly [ 98.016453] 313617 pages reserved [ 98.041020] syz-executor1: vmalloc: allocation failure: 17179869180 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 98.041028] CPU: 1 PID: 4681 Comm: syz-executor1 Not tainted 4.9.141+ #1 [ 98.041042] ffff8801cb29f788 ffffffff81b42e79 1ffff10039653ef3 ffff8801d52d97c0 [ 98.041053] ffffffff82aa8c00 0000000000000001 0000000000400000 ffff8801cb29f8d0 [ 98.041064] ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 [ 98.041066] Call Trace: [ 98.041080] [] dump_stack+0xc1/0x128 [ 98.041091] [] warn_alloc.cold.31+0x7f/0x9c [ 98.041103] [] ? zone_watermark_ok_safe+0x250/0x250 [ 98.041115] [] ? check_preemption_disabled+0x3b/0x200 [ 98.041125] [] __vmalloc_node_range+0x35e/0x600 [ 98.041134] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 98.041141] [] vmalloc+0x5b/0x70 [ 98.041151] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 98.041160] [] xt_alloc_entry_offsets+0x41/0x60 [ 98.041170] [] translate_table+0x2bb/0x1ba0 [ 98.041179] [] ? trace_hardirqs_on+0x10/0x10 [ 98.041190] [] ? avc_has_perm_noaudit+0x197/0x2f0 [ 98.041198] [] ? avc_has_perm_noaudit+0x90/0x2f0 [ 98.041208] [] ? arpt_do_table+0x16d0/0x16d0 [ 98.041217] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 98.041226] [] ? __might_fault+0x114/0x1d0 [ 98.041235] [] ? __check_object_size+0x248/0x38e [ 98.041246] [] do_replace.isra.7+0x1cc/0x470 [ 98.041254] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 98.041280] [] ? compat_do_replace.isra.6+0x4f0/0x4f0 [ 98.041289] [] ? selinux_capable+0x36/0x40 [ 98.041300] [] ? ns_capable_common+0x12a/0x150 [ 98.041310] [] do_arpt_set_ctl+0xff/0x140 [ 98.041319] [] nf_setsockopt+0x6d/0xc0 [ 98.041329] [] ip_setsockopt+0x88/0xa0 [ 98.041337] [] tcp_setsockopt+0x88/0xe0 [ 98.041346] [] sock_common_setsockopt+0x9a/0xe0 [ 98.041355] [] SyS_setsockopt+0x166/0x260 [ 98.041363] [] ? SyS_recv+0x40/0x40 [ 98.041372] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 98.041381] [] ? SyS_clock_settime+0x220/0x220 [ 98.041390] [] ? do_syscall_64+0x48/0x550 [ 98.041397] [] ? SyS_recv+0x40/0x40 [ 98.041405] [] do_syscall_64+0x19f/0x550 [ 98.041414] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 98.041418] Mem-Info: [ 98.041438] active_anon:53169 inactive_anon:2911 isolated_anon:0 [ 98.041438] active_file:4192 inactive_file:10525 isolated_file:0 [ 98.041438] unevictable:0 dirty:23 writeback:0 unstable:0 [ 98.041438] slab_reclaimable:4562 slab_unreclaimable:59764 [ 98.041438] mapped:57992 shmem:2918 pagetables:1156 bounce:0 [ 98.041438] free:1456041 free_pcp:442 free_cma:0 [ 98.041455] Node 0 active_anon:212676kB inactive_anon:11644kB active_file:16768kB inactive_file:42100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:231968kB dirty:92kB writeback:0kB shmem:11672kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 98.041476] DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:636kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 98.041507] Normal free:2804700kB min:5580kB low:9168kB high:12756kB active_anon:212676kB inactive_anon:11644kB active_file:16768kB inactive_file:42100kB unevictable:0kB writepending:92kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:18248kB slab_unreclaimable:239056kB kernel_stack:4960kB pagetables:4624kB bounce:0kB free_pcp:1104kB local_pcp:432kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 98.041569] DMA32: 2*4kB (UM) 2*8kB (M) 1*16kB (M) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB Normal: 3789*4kB (UME) 2604*8kB (UM) 2114*16kB (UME) 71*32kB (UME) 190*64kB (UME) 69*128kB (UM) 46*256kB (UME) 13*512kB (ME) 8*1024kB (UME) 3*2048kB (UM) 654*4096kB (M) = 2804628kB 17646 total pagecache pages [ 98.041640] 0 pages in swap cache [ 98.041645] Swap cache stats: add 0, delete 0, find 0/0 [ 98.041647] Free swap = 0kB [ 98.041650] Total swap = 0kB [ 98.041652] 1965979 pages RAM [ 98.041654] 0 pages HighMem/MovableOnly [ 98.041657] 313617 pages reserved [ 98.802548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pig=4704 comm=syz-executor2 20:48:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0x170) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) socket$inet(0x2, 0x1, 0x80000007fff) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00005c8000), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2) syz_open_procfs(r3, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab500fe3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 20:48:37 executing program 3: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000000c0), 0x0) write(r1, &(0x7f00000001c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0xd, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfffffffffffffffe) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) 20:48:37 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="747275737465642e7061675c6504c0ea8cdfd6fa9cfc656d6170001d19ac71e50b1c29f07d33fc073e7594d92b32f37c2d2bb2593b02fb82cbc8cb3bca762fd129b0858e3aa3743e8afe65bacb6c9bf14fd781ee0900000000000000007dee4d9bad5ca05b6dac45a4c173cb8c021e67b8d16585a681861a4f6ed8822236ae8e0571c816b81be02f081e058ada93dd17307f6c716a7c73fd59f701a7987f8011ee625d6033fad541ad74a27e6f8a1fde0e52df1bf2ad7510f2999b10c0b83b32544bbf041163ff6640e1eb4d4787134d2fdddbfc9cdeacc06b8b660187a3adf648fe229e85360721bc6a9335763ea8693b7294a3f2d17089a297ee67346f9696d435d4f610450bf8397d71d44a12404373c7d1976150839e9be73d27950ddcb1f66e72e44046f33cc7d10336e6ba6ac2dd1bf29285e04f5560702315d2634722760d1f9980f3d3a1aa6e156dd780eb1502c7453969eb2593e5c8df20839e51ced3"]) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000480)) write(r1, &(0x7f0000000080), 0x10000027d) unlinkat(r1, &(0x7f0000000680)='./bus\x00', 0x200) setxattr$security_smack_entry(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='-#,\x00', 0x4, 0x0) rename(&(0x7f0000000300)='./bus\x00', 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x0, 0x100000001, 0x7fffffff, 0x0, 0x8, 0xffffffffffffff9c, 0x7ff}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000600)='./bus\x00', 0x0) r3 = memfd_create(&(0x7f0000000780)='!\x00', 0x0) r4 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f00000006c0)="764ec8681f08d6762f861d7c33bd8b59bb7c7bcdbc3d61e71c69986594d498030b207b020d901bdc0460a16eab40c26b844ce4228752623a8e7047c2484c787684bae6f30c79f9b5fa894c4a517bd93fcc8cf38821ecae226fd203903bbb6009752905054aae471b89cf63a45f", 0x6d, 0xfffffffffffffffb) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x4, 0xb9dd, 0x80000001, 0x1}, {0xfffffffffffffffc, 0xa5, 0x6, 0x8001}, {0x2, 0x28000, 0x20, 0x9}, {0x9e0b, 0xffffffffffffffe1, 0x20, 0xfffffffffffffffd}]}) keyctl$set_timeout(0xf, r4, 0x8) symlinkat(&(0x7f00000005c0)='./bus\x00', r2, &(0x7f0000000740)='./bus\x00') sendfile(r3, r2, &(0x7f0000000380), 0x2000005) write$P9_RRENAMEAT(r3, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x74) 20:48:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x5) request_key(&(0x7f0000000280)="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", &(0x7f0000000140)={'\x00', 0x0}, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) fsetxattr$security_smack_entry(r1, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000100)='cpusetuserttrustedcgroup\x00', 0x19, 0x3) 20:48:37 executing program 0: r0 = socket$inet6(0xa, 0x1000200000002, 0x101) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000180)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000580)="6f6f6d5f73636f72655f61646a009fc5720e384adb40f8bf6a31e8ce88025eb2f468545232f1891e7e6d19c96c475e6c136337f7247f3f393e62e82f3cdb6a3e3ad91004721815dc2910493cd03a0f18ec00c2778a3043f8a9ea61168ce643f5cbdc1cea609ce18edd8eaa1ff4afa35abf174d1affb18d505d3c9ee1425b79e6aee949db299bcba3576c74e9a9fcf8def05d0aa553161d6888c5eacfca35d22e93fd09902368710d9b3b83dd0f738012c68e7ed4efc73aee346375b203d5d529c9f12fea955f27fbb9a934ca9ef3fbc9d67ed5b77d42e52e86bfbb23b9f74eb3fe3f78cc585e16627a228aa4351074bbb7caa7ccde5fdcabf2b8c7b3d32624bb348109bbe3bf42286c6ebce9453c36248f29b01ac9e318a6d97a6b945aed96ade25ccb2c21130d762972f10045cc636772bfd475429fa58c38e4440fd356746489c85614173dd9cf2ac8c7b7cc18322f4a6d8c359314fd0227e3c9127ec310b7c7aecf4182337cfdba32bdc62de0455f78c7698d56d95c5f6cfbd878582e4e9b6491d5c1a1ba684c957746137bfdc8541fe1296807e8576e5de4") sendfile(r3, r0, &(0x7f0000000000), 0x7fff) fstat(r0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f00000003c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r4, r2, &(0x7f00000000c0), 0x800) 20:48:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x8000, 0x7fc, 0x3, 0xffffffffffff0001, 0x9127, 0x100000001, 0x1, 0x3, 0x400, 0x0, 0x5, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/148, 0x94}], 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 20:48:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000180)) ptrace(0x10, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r3, 0x24) ptrace$poke(0x4209, r3, &(0x7f00000000c0), 0x710000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$TCXONC(r0, 0x540a, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11000000fff1000000000100b43f786f441edd0000000000000e0000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB="c0b5ce05000000004377630df9ef7d689668658af92d4b11e8d0bfede03f0f4a92c982cae0fefd96019ab62b991135bba11105e3319f3344745b471bbff654e71860e60606fcac615f424a9d6a4e73388b62"], 0x0, 0x0, &(0x7f0000000600)}) 20:48:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x10000000005, &(0x7f0000000480)=0x0) io_getevents(r2, 0x7, 0x40, &(0x7f0000000300), &(0x7f0000000100)={0x77359400}) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @random="f498848ecda3"}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 20:48:38 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000080), 0x20c0000000) sync_file_range(r0, 0x7fffffff, 0x8, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/160) 20:48:38 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e1e, @local}, 0x10) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) poll(&(0x7f0000000080)=[{r0, 0x8000}, {r0, 0x200}, {r0, 0x8402}], 0x3, 0x1) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414bb0000000009000000ac1414bbe0000001ac141413ac1414cb0000000000000020ac141412000000053b14140f"], 0x34) socket$inet(0x2, 0x1, 0x6) [ 99.157547] nla_parse: 3 callbacks suppressed [ 99.157552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 20:48:38 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="6b1bb47b500aa56275e9351c2c9dd927070bb532bcc07b2228853f65e7022a9f97acf581871838fbf2fe1f953f41031e47b519f5d9ede088cdff0a0c267296d6bde05e", 0x43, 0x40000000, 0x0, 0x0) close(r0) io_setup(0x0, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) getpgrp(r1) getdents64(0xffffffffffffffff, &(0x7f0000000880)=""/79, 0xfffffffffffffff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x7, {0x7, 0x1b, 0x6, 0x0, 0x0, 0x8, 0xd01, 0x67}}, 0x50) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000580)={0xff, {{0x2, 0x4e20}}}, 0x88) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/54, 0xff55) ptrace$poke(0x5, 0x0, &(0x7f0000000180), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x100000000902, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x802, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x102, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="98b22f86534d43ec7b2c9e9cb33ebfffff"], 0x1}}, 0x0) r4 = open(&(0x7f0000000640)='./bus\x00', 0x141042, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000340)={0x3, 0xd4}) prctl$PR_SVE_SET_VL(0x32, 0x2a756) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000700)=""/67) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000001c0)={0x2c, 0x4, 0x0, {0x4, 0x5, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 20:48:38 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c45ffffffe00000000000000000030003000000000000000000380000000000400000000000000020000100000000000001000000000300000000000900001200000300000000000000000000000000000000000000129eb6f3f9b0eb4cb4ce5fae4da7062a231688dc01fb3170d773c6723c5fe66ba26c9bf2d84fa2a6e749c3c293fec0200f1fb9a2cb68c9576bc43f8768ca78b02ae1e4d4be77e457dc0f7515a99772b0d00539c33dfd688f9b"], 0x58) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) [ 99.341991] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.370048] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.401174] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.451080] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.501847] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.525251] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.553724] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 [ 99.583724] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=4771 comm=syz-executor2 20:48:38 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xa0000014}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x1}, 0x0, &(0x7f0000000080)={r2, r3+30000000}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000ac7000)) epoll_create1(0x80000) epoll_wait(r1, &(0x7f0000586000)=[{}], 0x158, 0x20) 20:48:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000884e000000000000000035c9d6ab81febc4b230000850000002ec90000009500000000000000d3b961b26fe1916f2a5a9eedf9ca06ce0f9a33c6846f2d610048dd94041ce97438a496f9d85140980444c220b062a2fd622ed0ea26997cd8368020277ae40aa58ac4eda42c1036df1edbab681364d80e0edb0860ab7771f50cf1ca62c0412b09917a6efd005d725efc"], &(0x7f0000003ff6), 0x1, 0xc3, &(0x7f0000011000)=""/195}, 0x48) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) accept(0xffffffffffffff9c, &(0x7f0000000200)=@can={0x1d, 0x0}, &(0x7f0000000280)=0x80) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@report={0x6c, 0x20, 0x1, 0x70bd2d, 0x25dfdbff, {0x33, {@in6=@dev={0xfe, 0x80, [], 0x1f}, @in=@rand_addr=0x9, 0x4e20, 0x5, 0x4e24, 0x3ff, 0x2, 0xa0, 0x0, 0x1d, r1, r2}}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd2d, 0x70bd2c, 0x70bd25, 0x5, [0x0]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 20:48:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='sockfs\x00', 0x0, 0x0) 20:48:39 executing program 0: unshare(0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1ff, 0x6, 0xa, &(0x7f0000000140)="ecff75525833bf33b41d"}) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0xd953, 0x4d, 0x2, 0x4, 0x8, 0x4, 0x2, 0x6, 0x1}}, 0x43) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.syz\x00') 20:48:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000240)={0x7f, {{0xa, 0x4e24, 0x4, @local, 0x7f}}}, 0x88) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x100, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@loopback, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x4000000000000, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x100000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x3, 0x0, 0xdffffffffffffffe}}, 0xe8) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000300)={0x10, 0x1, {0x56, 0xffffffff, 0x8001, {0x5, 0x7f}, {0x6, 0x5}, @period={0x5c, 0x1, 0x5, 0x3, 0x7fffffff, {0x100000000, 0x1000, 0x8}, 0x3, &(0x7f0000000000)=[0x9, 0x2, 0x7]}}, {0x57, 0x3f, 0x2a25, {0x4, 0xfffffffffffffffa}, {0x215c, 0x6}, @ramp={0x6, 0xffffffffffffffff, {0x9, 0x2, 0x7f, 0x6}}}}) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 20:48:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000580)="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") sendfile(r3, r0, 0x0, 0x7fff) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast2, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x2, r4}) 20:48:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=""/143, &(0x7f00000000c0)=0x465) r2 = socket$packet(0x11, 0x1, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4cb34589353903df0acade6bb63d09459a4f845535c97bc2fdb66ffa2a1cee0eb618b8077af77964818ca91f08911d4d7eecec87cb70c21b34297371d1dcbdcace8cffdc2abcc68567785dab3f86789db15dcd3e1cc5dbfecd828789a9fbe0f4d4c3de3db0d3673cf8d5aaff6158c3a3c935ad0b217d60d499e34f6c6a32fa86ad343cbd10e1703c189ab460dd1c315fef457abb33a0672a96dc0ab618f6b4badcfd70b78d96bc98bcb7d164ce4518f828e5771054285c5ed6111ea138172a52ccc3af6ea2c42f5f34e09d31fbd8e647b0f7ae327791654099d18b9a5731501c2e268392f74439129c266531aefce112", @ANYRES16=r4, @ANYBLOB="1b0b26bd7000fddbdf25020000000c0002000101000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x8000000000000000, 0x100000002, @mcast2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000017c0)={@remote, 0x45, r5}) [ 100.199800] ================================================================== [ 100.207224] BUG: KASAN: stack-out-of-bounds in xfrm_state_find+0x269d/0x2920 [ 100.214426] Read of size 4 at addr ffff8801aba5f650 by task syz-executor3/4801 [ 100.221781] [ 100.223407] CPU: 0 PID: 4801 Comm: syz-executor3 Not tainted 4.9.141+ #1 [ 100.230239] ffff8801aba5ecc0 ffffffff81b42e79 ffffea0006ae97c0 ffff8801aba5f650 [ 100.238350] 0000000000000000 ffff8801aba5f650 ffff8801c5ecaaf0 ffff8801aba5ecf8 [ 100.246466] ffffffff815009b8 ffff8801aba5f650 0000000000000004 0000000000000000 [ 100.254625] Call Trace: [ 100.257224] [] dump_stack+0xc1/0x128 [ 100.262590] [] print_address_description+0x6c/0x234 [ 100.269278] [] kasan_report.cold.6+0x242/0x2fe [ 100.275535] [] ? xfrm_state_find+0x269d/0x2920 [ 100.281811] [] __asan_report_load4_noabort+0x14/0x20 [ 100.288594] [] xfrm_state_find+0x269d/0x2920 [ 100.294645] [] ? xfrm_state_find+0x28e/0x2920 [ 100.300786] [] ? xfrm_unregister_mode+0x190/0x190 [ 100.307307] [] xfrm_tmpl_resolve_one+0x1d2/0x7a0 [ 100.313724] [] ? xfrm_expand_policies.constprop.14+0x290/0x290 [ 100.321351] [] ? depot_save_stack+0x11c/0x470 [ 100.327495] [] ? __lock_acquire+0x654/0x4a10 [ 100.333548] [] ? kasan_kmalloc.part.1+0xc9/0xf0 [ 100.339866] [] xfrm_resolve_and_create_bundle+0x21f/0x1e70 20:48:39 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r0, 0x40, 0x8}, 0xc) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000100)=0x20) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x6, 0x0, 0x200001, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000300)) r8 = memfd_create(&(0x7f0000000380)='\x00', 0x0) close(r1) writev(r4, &(0x7f0000000580)=[{&(0x7f00000004c0)="13f715e9895bfac0bc59b6b2edc81b2a17e5f8bef0200864be766104dd698b83eb0b64007b856342f0be18542f166ab768559703cdab6b53db5e288e83e76a392a1b43b1fc3008e7315f87a5634d94e814525718597707229a7a0eda7a1f7f6e295d0df98fbea31637f40612422d6394a7be35bffc1cc8828df249559e9cedda40589a08b5672549bc91217e076a9fa5cc8a852d6d06d04a8713ab22", 0x9c}], 0x1) futimesat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{}, {0x0, 0x2710}}) ftruncate(r8, 0x1000000) sendfile(r7, r8, 0x0, 0xfffffdef) 20:48:39 executing program 1: pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = socket(0x18, 0x0, 0x3) connect$unix(r0, &(0x7f0000000000)=@file={0x0, "380d23b51125b9288a2bb2a1086d05c800"}, 0x6e) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) 20:48:39 executing program 1: getrandom(&(0x7f00000001c0)=""/224, 0xfffffffffffffffa, 0x2) r0 = socket$netlink(0x10, 0x3, 0x16) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000001500)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) [ 100.347132] [] ? xfrm_tmpl_resolve_one+0x7a0/0x7a0 [ 100.353718] [] ? trace_hardirqs_on+0x10/0x10 [ 100.359777] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.366532] [] ? check_preemption_disabled+0x3b/0x200 [ 100.373366] [] ? check_preemption_disabled+0x3b/0x200 [ 100.380212] [] ? xfrm_sk_policy_lookup+0x2a0/0x430 [ 100.386784] [] ? xfrm_sk_policy_lookup+0x2c7/0x430 [ 100.393361] [] ? xfrm_selector_match+0xe40/0xe40 [ 100.399762] [] xfrm_lookup+0x239/0xc00 [ 100.405300] [] ? xfrm_sk_policy_lookup+0x430/0x430 [ 100.411874] [] ? check_preemption_disabled+0x3b/0x200 [ 100.418725] [] ? __ip_route_output_key_hash+0xc7b/0x2090 [ 100.425821] [] ? __ip_route_output_key_hash+0xca2/0x2090 [ 100.432913] [] ? __ip_route_output_key_hash+0x16a/0x2090 [ 100.440004] [] ? rt_set_nexthop.constprop.13+0xcc0/0xcc0 [ 100.447114] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.453874] [] xfrm_lookup_route+0x39/0x140 [ 100.459839] [] ip_route_output_flow+0x90/0xa0 [ 100.465988] [] udp_sendmsg+0x13d9/0x1c60 [ 100.471693] [] ? udp_sendmsg+0xe9f/0x1c60 [ 100.477486] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 100.483623] [] ? udp_v4_get_port+0x100/0x100 [ 100.489678] [] ? trace_hardirqs_on+0x10/0x10 [ 100.495743] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 100.502068] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 100.508908] [] udpv6_sendmsg+0x127d/0x2430 [ 100.514790] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 100.521117] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 100.528049] [] ? udp_seq_next+0x80/0x80 [ 100.533670] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.540422] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.547169] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 100.553490] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 100.560327] [] ? release_sock+0x14e/0x1c0 [ 100.566119] [] ? trace_hardirqs_on+0xd/0x10 [ 100.572093] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 100.578421] [] ? _raw_spin_unlock_bh+0x30/0x40 [ 100.584660] [] ? release_sock+0x14e/0x1c0 [ 100.590460] [] inet_sendmsg+0x203/0x4d0 [ 100.596084] [] ? inet_sendmsg+0x73/0x4d0 [ 100.601801] [] ? inet_recvmsg+0x4c0/0x4c0 [ 100.607634] [] sock_sendmsg+0xbb/0x110 [ 100.613162] [] ___sys_sendmsg+0x47a/0x840 [ 100.618950] [] ? trace_hardirqs_on+0x10/0x10 [ 100.625006] [] ? copy_msghdr_from_user+0x530/0x530 [ 100.631578] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.638327] [] ? check_preemption_disabled+0x3b/0x200 [ 100.645182] [] ? check_preemption_disabled+0x3b/0x200 [ 100.652015] [] ? __fget+0x214/0x3d0 [ 100.657302] [] ? __fget_light+0x169/0x1f0 [ 100.663093] [] ? __fdget+0x18/0x20 [ 100.668295] [] __sys_sendmmsg+0x161/0x3d0 [ 100.674086] [] ? SyS_sendmsg+0x50/0x50 [ 100.679641] [] ? sock_ioctl+0x23e/0x3c0 [ 100.685273] [] ? compat_ifr_data_ioctl+0x1a0/0x1a0 [ 100.691866] [] ? __might_fault+0x114/0x1d0 [ 100.697747] [] ? __might_fault+0x18e/0x1d0 [ 100.703628] [] ? __might_fault+0xe4/0x1d0 [ 100.709419] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 100.715651] [] ? SyS_clock_settime+0x220/0x220 [ 100.721879] [] SyS_sendmmsg+0x35/0x60 [ 100.727330] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 100.733316] [] do_syscall_64+0x19f/0x550 [ 100.739031] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 100.745944] [ 100.747562] The buggy address belongs to the page: [ 100.752484] page:ffffea0006ae97c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 100.760749] flags: 0x4000000000000000() [ 100.764717] page dumped because: kasan: bad access detected [ 100.770414] [ 100.772034] Memory state around the buggy address: [ 100.776959] ffff8801aba5f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 100.784314] ffff8801aba5f580: f1 f1 f1 00 f2 f2 f2 f2 f2 f2 f2 00 00 00 00 f2 [ 100.791669] >ffff8801aba5f600: f2 f2 f2 00 00 00 00 00 00 00 f2 f2 f2 f2 f2 00 20:48:39 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000a77ff0), &(0x7f000044a000)={0x0, 0x989680}, 0xfffffffffffffd59) 20:48:39 executing program 5: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492565, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0xa0001, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/81) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) [ 100.799020] ^ [ 100.804983] ffff8801aba5f680: 00 00 00 00 00 00 00 00 f2 f2 f2 00 00 00 00 00 [ 100.812348] ffff8801aba5f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.819692] ================================================================== [ 100.827042] Disabling lock debugging due to kernel taint [ 100.840049] Kernel panic - not syncing: panic_on_warn set ... [ 100.840049] [ 100.847428] CPU: 0 PID: 4801 Comm: syz-executor3 Tainted: G B 4.9.141+ #1 [ 100.855475] ffff8801aba5ec20 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 100.863530] 0000000000000000 0000000000000000 ffff8801c5ecaaf0 ffff8801aba5ece0 [ 100.871619] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 100.880134] Call Trace: [ 100.882722] [] dump_stack+0xc1/0x128 [ 100.888080] [] panic+0x1bf/0x39f [ 100.893094] [] ? add_taint.cold.5+0x16/0x16 [ 100.899096] [] ? ___preempt_schedule+0x16/0x18 [ 100.905350] [] kasan_end_report+0x47/0x4f [ 100.911148] [] kasan_report.cold.6+0x76/0x2fe [ 100.917318] [] ? xfrm_state_find+0x269d/0x2920 [ 100.923544] [] __asan_report_load4_noabort+0x14/0x20 [ 100.930300] [] xfrm_state_find+0x269d/0x2920 [ 100.936351] [] ? xfrm_state_find+0x28e/0x2920 [ 100.942480] [] ? xfrm_unregister_mode+0x190/0x190 [ 100.948957] [] xfrm_tmpl_resolve_one+0x1d2/0x7a0 [ 100.955349] [] ? xfrm_expand_policies.constprop.14+0x290/0x290 [ 100.962957] [] ? depot_save_stack+0x11c/0x470 [ 100.969085] [] ? __lock_acquire+0x654/0x4a10 [ 100.975142] [] ? kasan_kmalloc.part.1+0xc9/0xf0 [ 100.981588] [] xfrm_resolve_and_create_bundle+0x21f/0x1e70 [ 100.988848] [] ? xfrm_tmpl_resolve_one+0x7a0/0x7a0 [ 100.995422] [] ? trace_hardirqs_on+0x10/0x10 [ 101.001515] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.008286] [] ? check_preemption_disabled+0x3b/0x200 [ 101.015131] [] ? check_preemption_disabled+0x3b/0x200 [ 101.021978] [] ? xfrm_sk_policy_lookup+0x2a0/0x430 [ 101.028538] [] ? xfrm_sk_policy_lookup+0x2c7/0x430 [ 101.035098] [] ? xfrm_selector_match+0xe40/0xe40 [ 101.041484] [] xfrm_lookup+0x239/0xc00 [ 101.047006] [] ? xfrm_sk_policy_lookup+0x430/0x430 [ 101.053566] [] ? check_preemption_disabled+0x3b/0x200 [ 101.060389] [] ? __ip_route_output_key_hash+0xc7b/0x2090 [ 101.067474] [] ? __ip_route_output_key_hash+0xca2/0x2090 [ 101.074571] [] ? __ip_route_output_key_hash+0x16a/0x2090 [ 101.081664] [] ? rt_set_nexthop.constprop.13+0xcc0/0xcc0 [ 101.088749] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.095496] [] xfrm_lookup_route+0x39/0x140 [ 101.101460] [] ip_route_output_flow+0x90/0xa0 [ 101.107597] [] udp_sendmsg+0x13d9/0x1c60 [ 101.113298] [] ? udp_sendmsg+0xe9f/0x1c60 [ 101.119110] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 101.125242] [] ? udp_v4_get_port+0x100/0x100 [ 101.131297] [] ? trace_hardirqs_on+0x10/0x10 [ 101.137351] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 101.143684] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 101.150524] [] udpv6_sendmsg+0x127d/0x2430 [ 101.156389] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 101.162693] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 101.169600] [] ? udp_seq_next+0x80/0x80 [ 101.175220] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.181976] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.188723] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 101.195026] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 101.201850] [] ? release_sock+0x14e/0x1c0 [ 101.207644] [] ? trace_hardirqs_on+0xd/0x10 [ 101.213598] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 101.219901] [] ? _raw_spin_unlock_bh+0x30/0x40 [ 101.226114] [] ? release_sock+0x14e/0x1c0 [ 101.231893] [] inet_sendmsg+0x203/0x4d0 [ 101.237502] [] ? inet_sendmsg+0x73/0x4d0 [ 101.243197] [] ? inet_recvmsg+0x4c0/0x4c0 [ 101.248979] [] sock_sendmsg+0xbb/0x110 [ 101.254497] [] ___sys_sendmsg+0x47a/0x840 [ 101.260281] [] ? trace_hardirqs_on+0x10/0x10 [ 101.266331] [] ? copy_msghdr_from_user+0x530/0x530 [ 101.272896] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.279636] [] ? check_preemption_disabled+0x3b/0x200 [ 101.286462] [] ? check_preemption_disabled+0x3b/0x200 [ 101.293306] [] ? __fget+0x214/0x3d0 [ 101.298570] [] ? __fget_light+0x169/0x1f0 [ 101.304353] [] ? __fdget+0x18/0x20 [ 101.309542] [] __sys_sendmmsg+0x161/0x3d0 [ 101.315326] [] ? SyS_sendmsg+0x50/0x50 [ 101.320860] [] ? sock_ioctl+0x23e/0x3c0 [ 101.326477] [] ? compat_ifr_data_ioctl+0x1a0/0x1a0 [ 101.333052] [] ? __might_fault+0x114/0x1d0 [ 101.338956] [] ? __might_fault+0x18e/0x1d0 [ 101.344873] [] ? __might_fault+0xe4/0x1d0 [ 101.350664] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 101.356903] [] ? SyS_clock_settime+0x220/0x220 [ 101.363120] [] SyS_sendmmsg+0x35/0x60 [ 101.368563] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 101.374521] [] do_syscall_64+0x19f/0x550 [ 101.380218] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 101.387412] Kernel Offset: disabled [ 101.391028] Rebooting in 86400 seconds..