Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. 2019/12/02 08:24:53 fuzzer started 2019/12/02 08:24:54 dialing manager at 10.128.0.26:33451 2019/12/02 08:24:54 syscalls: 1374 2019/12/02 08:24:54 code coverage: enabled 2019/12/02 08:24:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/12/02 08:24:54 extra coverage: extra coverage is not supported by the kernel 2019/12/02 08:24:54 setuid sandbox: enabled 2019/12/02 08:24:54 namespace sandbox: enabled 2019/12/02 08:24:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 08:24:54 fault injection: kernel does not have systematic fault injection support 2019/12/02 08:24:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 08:24:54 net packet injection: enabled 2019/12/02 08:24:54 net device setup: enabled 2019/12/02 08:24:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 08:24:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:25:24 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101200, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) get_robust_list(r1, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x900010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x402000, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000340)=0x9) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_GET(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x4050}, 0x4008844) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)=[@increfs, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x1}, @release, @exit_looper], 0x58, 0x0, &(0x7f00000005c0)="983583c6794bd33c78ac383d2f0bdded0990ad8c625a7f06209d34f5abce7e68d33c66186cd3c32c4d82d9b3e6c9bdcbed837cad64fef1afef9a30945982ef8ad84f64dbe91b337290de7653eae5acd34ff511b112174918"}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000680)=0xa, 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000740)={0x5, &(0x7f0000000700)=[{0x8, 0x7f, 0x66, 0x6d}, {0x7f, 0x1f, 0x80, 0x1}, {0x2, 0x4, 0x2, 0xdff}, {0x3, 0x1}, {0x800, 0xff, 0x7e}]}, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000780)) r8 = dup2(0xffffffffffffffff, r5) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000800)={0x6, 0x20, 0xf000, 0x0, 0x2, 0x3f, 0xfc, 0x2, 0x1, 0x1b}) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06055c8, &(0x7f0000000880)={0x8, 0x9, {0x57, 0x1a, 0xfffd, {0x950, 0x2}, {0x2, 0x8}, @rumble={0x8, 0x3ff}}, {0x55, 0x9, 0x7, {0x8c5e, 0x200}, {0x1, 0x8}, @period={0x59, 0x7f, 0x2, 0x41, 0x1, {0x7, 0xc2, 0x0, 0x2}, 0x3, &(0x7f0000000840)=[0x4, 0x76b1, 0x8]}}}) fcntl$setsig(r7, 0xa, 0x38) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900)='/dev/fuse\x00', 0x2, 0x0) pwrite64(r9, &(0x7f0000000940)="42ae3bdc1886e7b314bfbf5b7544c520493ff430d1d1c0d9fa8a4a76983bc7af4c60f82360fdae87555da1fb44fcc2d9c260984cfd32dc7852f24f3628de1d6ffd7a3d0f6e945b0383ef2a1a0c1ccc2c33af65611daecccc4a6617aee24a243629712560e0d0d0ecdc75bc0ca8611f06b4eaf9b284d34fa3dc4cc630cfba0a6639d3bfff07d78b10de19dfda685ca9266cef5ff33111aa48e3fe19a942f741aea10258280d00dbfdb84cf9994b1f319d718cd0e20329ec1d0871080eb1b31315ed294e37693d1172a5df2dbc6cee861e8ca0d875e7b446e255b1901ee5675d80e5c20b17", 0xe4, 0x50b809b3) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vga_arbiter\x00', 0x3cb882, 0x0) recvfrom$packet(r10, &(0x7f0000000a80)=""/112, 0x70, 0x20, 0x0, 0x0) pipe(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000b40)={'nr0\x00', @local}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000b80)={0x5, 0x9564, 0x5, 0x3ff, 0x9}) ioctl$TUNGETFILTER(r8, 0x800854db, &(0x7f0000000bc0)=""/39) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000c00)='./file0\x00', r12, r13) 08:25:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f0000000040)={0xd, 0x2, {0x0, 0xba92, 0x2, {0x0, 0x300}, {0x0, 0x6}, @cond=[{0x1, 0x8, 0x129, 0x20, 0x5, 0x2}, {0x7ff, 0x7ff, 0x3f, 0x1, 0x3, 0x9}]}, {0x54, 0x800, 0xa8, {0x40, 0xfff}, {0x5, 0x8000}, @const={0x3, {0x1, 0xffff, 0xfbc, 0x7}}}}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r1, 0x8, r2) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x94) openat$cgroup_type(r3, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x800, 0x2) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0xa, &(0x7f0000000280)=[{0x70e, 0x20, 0x4, 0x8}, {0x4, 0x7, 0x5, 0x1}, {0x101, 0x2, 0x3, 0x7}, {0x2, 0x40, 0x81, 0x4}, {0x3, 0x5, 0xa3, 0x8}, {0x3, 0xff, 0xfd, 0x3}, {0x0, 0x81, 0x1, 0xfffffff7}, {0x1, 0x7f, 0x63, 0xffffffff}, {0x3, 0x20, 0x20, 0x5a5}, {0x37a4, 0xf4, 0xe5, 0x7f}]}, 0x8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@local, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6, 0x3f, 0x78, 0x400, 0x800, 0x200080, r7}) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8) sendto(r5, &(0x7f0000000600)="b123dd608ac72bb7066609c1533b1a3947094d75fc58153d74a9a1b0996cf70b930ec87abd4d68f60d4bc8cc972ce0c64f4006875cc78b2b5367ab82c1ad7efea668e9ac0efd1339dbf8a09de18039d42bf8b0f7fee4b94039153e6d1932ea42e0884e4686fa8650fd245da6a73a889352c966d97e5755c8fe67bbb51e8d7ee95616228d8c36e246f614", 0x8a, 0x10, &(0x7f0000000800)=@ll={0x11, 0xf5, r8, 0x1, 0x0, 0x6, @local}, 0x80) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40046602, &(0x7f0000000900)=0x8020) getpeername(0xffffffffffffffff, &(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000009c0)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x43, &(0x7f0000000a00)={'icmp6\x00'}, &(0x7f0000000a40)=0x1e) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000a80)={0x1, 0xe1, "4da15e4f095f0247a462da0cb4fdf4e2b582043d7f55bf8179ce8dadf07512c3e25ff6e4cbe187a9d2e0a86094d915e2cda8bd6c05a232f7d64a1c4353cf36ee4927da4da5650bf4fe9a2ca6902e129df53a7a3f89acab0654c885cd956cd44636dd9731f2ce1732f3c3b4a558d8ee8bef310c6a0b39f31ce60debd096432f3e92e2d43956683e4d70dc793595d6bfb5650fc365d10ceaf65dc43cc576d8334ca4150ee6f216fc12e21f99fe91cfc9d3da5c3eeee2f5febed1e9a9904e7ee15f1f8969126b4237e9ff1394a5d8cec80a20909323b861d6740c626af32ad89796f6"}) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000d40)=0xe8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d80)={'nr0\x00', r8}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000dc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000ec0)=0xe8) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000f80)={0x0, @nfc={0x27, 0x1, 0x0, 0x3}, @sco={0x1f, {0x7, 0x5, 0x0, 0x9, 0x81, 0xd1}}, @hci={0x1f, r7, 0x2}, 0x70c, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f40)='veth1_to_bond\x00', 0xd65, 0x101, 0xecb1}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@local, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001340)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000001440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) accept4(0xffffffffffffffff, &(0x7f0000001500)=@can={0x1d, 0x0}, &(0x7f0000001580)=0x80, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@dev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000016c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001700)={@loopback, @multicast1, 0x0}, &(0x7f0000001740)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000005f40)={@dev, @broadcast, 0x0}, &(0x7f0000005f80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000005fc0)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000060c0)=0xe8) getpeername$packet(r6, &(0x7f0000006100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006140)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000006180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000061c0)=0x14) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000006b00)={&(0x7f0000000b80), 0xc, &(0x7f0000006ac0)={&(0x7f0000006200)={0x88c, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x220, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x863c}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2232f60c}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6a}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r20}, {0x108, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0xfc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}]}}, {{0x8, 0x1, r25}, {0xbc, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x130, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xb648}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x15df}}}]}}, {{0x8, 0x1, r29}, {0x180, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x88c}}, 0x4000) 08:25:24 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2012000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3ac, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6d1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4f8f}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50e536e3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcedd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}]}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x97}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) init_module(&(0x7f0000000580)='ib\x00', 0x3, &(0x7f00000005c0)='\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/enforce\x00', 0x2400, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000640)={0x7, 0x0, 0x1, 0x4, 0x1, [{0xffffffffffff006c, 0x1, 0x1, 0x0, 0x0, 0x3af13b630f429548}]}) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x80000000, 0x4000) rt_sigsuspend(&(0x7f0000000700)={0xd5d5}, 0x8) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000740)="99e5f0b3e59aae972449635c81e43819c541396fc4e4228d1371d2ee6aa0c62708372f6523d12f9d0df6e11426e92bdc6d444b343456176d00931b56a7277953187412ff2c63652b1cf4e975fc3429562f5e50cee1913523e400d48fcfb884fcc04ff7756f7362a55048f6176f69438fafe37a9acd988ab1dc4493472d839413f5e4e469d93254c47f8b82d1a77ee6e5a30c0a097f2df64ebafe577c6a1c0df12cb678e87f27b193fe8d9ebb1f5789c73dcd7de03edae5e4f122d40f6c3006d71866283c9bce8bdd67baa165eb475161d8d48e4572cd97419be1eaa54f7782549700d581c46bb64b5ebf8a2e81c2e989a7cb89e6e0d87b3bac3435f533f902a9") socketpair(0x5, 0x1, 0xcc, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000001c40)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/66, 0x42}, {&(0x7f00000019c0)=""/2, 0x2}, {&(0x7f0000001a00)=""/104, 0x68}, {&(0x7f0000001a80)=""/134, 0x86}], 0x6, &(0x7f0000001b80)=""/148, 0x94}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c80)='memory.events\x00', 0x0, 0x0) writev(r5, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="20a9f1918449a596f200f8d48e4a5d", 0xf}, {&(0x7f0000001d00)="e6ab0f69cb4b79a93052c53520c7f4a5b3987bdc0c3249b42ea94163428a9688f97d837f0684eb1d3490b087e9e4f49dd6d86bbcb87e4bc44363231e4fd098606e38b8c8584e4cdec1d0b4b00e9ca2e958db30f9d5fac17e1535f4a67fd406d98553f19d25948d74f3fb4d0c65fc216af892cabc4b674499a5ddc03325bbe0f2f4ef39eab8c0e46252e1cf83b91508807c5dbe67f1cb9e2dfef556d80a1f8b51", 0xa0}], 0x2) r6 = syz_open_dev$mice(&(0x7f0000001e00)='/dev/input/mice\x00', 0x0, 0x80) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001e40)='/proc/self/net/pfkey\x00', 0x201, 0x0) write$P9_RSYMLINK(r7, &(0x7f0000001e80)={0x14, 0x11, 0x1, {0x90, 0x0, 0x7}}, 0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000001f00)=@req={0x20, &(0x7f0000001ec0)={'syz_tun\x00', @ifru_map={0x1000, 0x1ff, 0x6, 0xf8, 0x0, 0xe1}}}) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001f40)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000001f80)) write$P9_RRENAME(r5, &(0x7f0000002000)={0x7, 0x15, 0x2}, 0x7) pipe(&(0x7f0000002040)) r10 = open(&(0x7f0000002080)='./file0\x00', 0x20180, 0x100) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f00000020c0)={0x0, 0x1, {0x2f, 0x13, 0xd, 0x14, 0x6, 0x7, 0x5, 0xd1, 0x1}}) r11 = accept4(0xffffffffffffffff, &(0x7f0000002100)=@hci, &(0x7f0000002180)=0x80, 0x80000) fallocate(r11, 0xd6, 0x8a82, 0x48326ca5) r12 = syz_open_dev$rtc(&(0x7f00000021c0)='/dev/rtc#\x00', 0x5, 0x12000) ioctl$RTC_IRQP_READ(r12, 0x8004700b, &(0x7f0000002200)) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000002280)='fou\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002300)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002380)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000002480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000024c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000025c0)=0xe8) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000026c0)={&(0x7f0000002240), 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x7c, r13, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r15}, @FOU_ATTR_IFINDEX={0x8, 0xb, r16}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 08:25:24 executing program 3: prctl$PR_GET_DUMPABLE(0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x41a100, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000040)) r2 = fcntl$dupfd(r1, 0xe8c1f2cd8b2b98e3, 0xffffffffffffffff) ioctl$TCSBRK(r2, 0x5409, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$lock(r3, 0x26, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x4, r4}) ioctl$TUNGETFILTER(r1, 0x800854db, &(0x7f0000000140)=""/5) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x6}, @window={0x3, 0x101, 0x8000}, @timestamp, @timestamp, @mss={0x2, 0x6b5}, @mss={0x2, 0x2}, @sack_perm, @mss={0x2, 0x59d}, @sack_perm], 0x9) r6 = open(&(0x7f0000000240)='\x00', 0x408100, 0x40) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4004240b, &(0x7f00000002c0)={0x0, 0x70, 0x17, 0x4, 0x81, 0x0, 0x0, 0x114, 0x20, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x379073c3, 0x1, @perf_bp={&(0x7f0000000280), 0xd}, 0x2000, 0x6, 0xfff, 0x0, 0x7ff, 0x9f3, 0xa44}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x20000, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "8b594802f1131696", "800f4b7147a79a2662a2de34b3f66d52", "068d60d6", "2db407528703ae8c"}, 0x28) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) pipe(&(0x7f0000000400)) r9 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x581002) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000480)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x100, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f00000005c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x20, {0x2, 0x4e24, @multicast2}, 'bond_slave_1\x00'}) r11 = socket$inet(0x2, 0x3, 0x6) recvfrom(r11, &(0x7f0000000640)=""/229, 0xe5, 0x0, 0x0, 0x0) r12 = creat(&(0x7f0000000740)='./file0\x00', 0x10) ioctl$EVIOCGEFFECTS(r12, 0x80044584, &(0x7f0000000780)=""/149) r13 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, &(0x7f0000000840)={'veth1_to_bond\x00', {0x2, 0x4e20, @loopback}}) 08:25:24 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) fsetxattr(r1, &(0x7f00000001c0)=@random={'user.', 'batadv0\x00'}, &(0x7f0000000200)='batadv0\x00', 0x8, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x82100, 0x0) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)=r3) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$setflags(r4, 0x2, 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x6) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000400)=0x11, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ptrace$cont(0x18, r6, 0xfd, 0x10001) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x101001, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40102290}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r8, 0x900, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$BLKRESETZONE(r9, 0x40101283, &(0x7f00000006c0)={0x1, 0x5}) ioctl$int_out(r7, 0x5460, &(0x7f0000000700)) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r10, 0x8018456f, &(0x7f0000000780)=""/109) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000800)={0x0, 'lapb0\x00', {0x2}, 0x8000}) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1008c}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r12, 0x5456, &(0x7f0000000a00)={0x81, 0x10001, 0x6, 0xde0b, 0xc, 0x40, 0x5, 0x2, 0x4, 0x3c0, 0x1f, 0x24}) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r13, 0x7003) 08:25:24 executing program 4: ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x6, 0x5, 0x0, [{0x5, 0x5720, 0x1, 0x3, 0xff, 0x5, 0x1f}, {0x1, 0x6, 0x0, 0x4, 0xff, 0x4, 0x7}, {0x6, 0x6, 0x7, 0x0, 0x1f, 0x2, 0x2}, {0x2, 0x100000001, 0x5, 0x1f, 0x0, 0x7, 0x18}, {0x1ff, 0xd628, 0x3, 0x2, 0x6, 0x0, 0x9}]}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9804f65e4a529d6a}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0xe02, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x200080c0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101000, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000440)=@srh={0x2f, 0x4, 0x4, 0x2, 0x0, 0x20, 0x1f, [@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, 0x28) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000480)) r5 = dup3(r3, r4, 0x40000) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x4, 0x54, [], 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000540)=""/84}, &(0x7f0000000640)=0x50) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000680)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/policy\x00', 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/enforce\x00', 0x2200, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000740)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000780), 0x8) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000800)=[@timestamp, @timestamp, @window={0x3, 0x0, 0xa4bf}, @sack_perm, @timestamp, @timestamp], 0x6) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x30902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, r9, r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x43, &(0x7f0000000a80)={'HL\x00'}, &(0x7f0000000ac0)=0x1e) lseek(r11, 0x60e7, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000b00)=0x80) r12 = accept4$inet(r5, &(0x7f0000000b40)={0x2, 0x0, @empty}, &(0x7f0000000b80)=0x10, 0x400) ioctl$sock_inet_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000bc0)={'vcan0\x00', {0x2, 0x4e21, @remote}}) syzkaller login: [ 59.061312] audit: type=1400 audit(1575275125.471:5): avc: denied { create } for pid=2248 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 59.130713] audit: type=1400 audit(1575275125.551:6): avc: denied { write } for pid=2258 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 59.145158] audit: type=1400 audit(1575275125.551:7): avc: denied { read } for pid=2248 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:25:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@newspdinfo={0x14, 0x24, 0x703}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x800000000000205, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/enforce\x00', 0x600, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e1e, 0x10001, @loopback}, 0x1fb) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) openat$cgroup_ro(r5, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x158) restart_syscall() setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, "a9bb6985f862ac1dad8d2b48855bee347e639abfb73f25e68f05f8bd746616146cdcc00fc52e0b4fac654b2b083ef46510a626c1c733f4fc346acd5001ea72ade16ae272eff6ceff7db90a2dbf8ea398"}, 0xd8) dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback}, 0x1c) bind$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/dev_mcast\x00') ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000680)=@generic={0x0, 0x3ff, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, "1948074d07f8564d8ecee9f5719e0603cb4dddd689c31453731f10b427ff1b2197adcd3529853f5a572c6b2951b4658fe3f8dee9754347a5d751fbf6cc3785cb5937d850c705d6566d106edc96036a54"}, 0xd8) munlockall() r6 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x10) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f00000003c0), 0x8000fffffffe) 08:25:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f00000003c0)='team_slave_1\x00'}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r6, &(0x7f0000000780)='./bus\x00', 0x184) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x2}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) [ 59.441827] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 08:25:26 executing program 1: capset(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x2, 0x28a) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESDEC=r2, @ANYRES16=0x0], 0x5) add_key$user(&(0x7f0000000140)='user\x00', 0x0, &(0x7f00000001c0)="343083550b69b91b7753a2060329037bad4e15295502f1f7a5332dd7d889ea25addaf9da3e67b4c17aec439e9555dbef7a867e0801ac84c62d54a042ac897c2df50837d88bf7171966eac01b1cbca35fc03aec34", 0x54, 0xfffffffffffffffc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x130, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4, @rand_addr=0x17}, 0x10) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x3080004) r5 = creat(&(0x7f0000000a40)='./bus/file0\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x28, 0x0, 0x8) socket(0x2000000000018, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000100)=0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socket(0x0, 0x0, 0x5) 08:25:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sessionid\x00') exit(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) flock(r1, 0x3) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1e7b02) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() r5 = getgid() setresgid(r3, r4, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000074345bf500000000000000000000000000000002000020000000000000927a36a0c40000894466e7"]}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0}, &(0x7f0000001300)=0xc) setxattr$system_posix_acl(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="0200000001000000000000000200ed91", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="02001799", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="10000000000000002000030000000000"], 0x54, 0x1) r8 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1e7b02) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) flock(r9, 0x3) fchown(r9, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/76, 0x4c) r10 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x9, 0xff, 0x80, 0x6, 0x0, 0x8, 0x40010, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x81, 0x9}, 0x400, 0xc298, 0x5, 0x0, 0x0, 0x5, 0x2}, 0xffffffffffffffff, 0xb, r9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0xffffffff) fstat(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() r13 = getgid() setresgid(r11, r12, r13) fchown(r1, 0xffffffffffffffff, r12) sendfile(r1, r0, 0x0, 0x6f) [ 59.901473] audit: type=1400 audit(1575275126.321:8): avc: denied { ioctl } for pid=2321 comm="syz-executor.0" path="socket:[7790]" dev="sockfs" ino=7790 ioctlcmd=6201 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:25:26 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x14b) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x497a) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r3, 0x104, 0x0, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x10c) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000480)) sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x880, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r7 = memfd_create(&(0x7f0000001200)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xa8\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendfile(r7, r8, 0x0, 0x497a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000003c0)={{0x3, 0x0, @reserved="f55c408a3d54d687e428d772ceb4f61011d89c77415b36d8634f3b4c00a171bf"}}) 08:25:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x18}}, 0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000000)={0x57, 0x5, 0x5, {0x0, 0x2}, {0x9, 0x8a}, @ramp={0x2, 0x1, {0x2, 0x101, 0x5, 0x4}}}) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) r2 = socket$inet6(0x10, 0x0, 0x3) fallocate(r2, 0x8, 0xe2, 0x7) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "7a303d738b3f73e33cb5ed345fdf0480"}, 0x11, 0x1dfa459b4898a4f4) fdatasync(0xffffffffffffffff) 08:25:26 executing program 1: pipe(&(0x7f0000000300)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x3fa610076603142f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) fstatfs(r2, &(0x7f0000000340)=""/185) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1811, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x20}, 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0xa4a40, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000080)=0x1ee, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102}) dup2(0xffffffffffffffff, 0xffffffffffffffff) vmsplice(r3, 0x0, 0x0, 0xe) 08:25:26 executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000b80)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000004f00000000000000000000000000000000ffff0000820000000400000000000000050000000000000003000000000000000004000000000000000000000000000000000000000000000000000000000000fdffffff030000000300000000000000e807000000000000090000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9f3f9f5ec30c6aeaf11000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000500"/505]) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xbab230cf) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x3}}, 0x1c) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) getegid() lstat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/keychord\x00', 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000001ec0)={@initdev}, &(0x7f0000001f00)=0x14) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe76) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sendto$unix(r5, &(0x7f00000006c0)="e4be6e36c9240fd5d17aa006fcaca71353d6e87ee862cde2b2d3dc7a80e59c668f3cbc0a0791e48ea98025599c3ffed9f659486c5332e8e70e0e17476ede54956aa70cc9bfd65c51402639b1b297bf058b79cea6def6373622b5adfc3af2c7", 0x5f, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='fuseblk\x00', 0x2010, &(0x7f0000000e00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',']) getgid() socket$key(0xf, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffd4b) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 08:25:27 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffffffffffe87) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lseek(r0, 0x0, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) flock(r2, 0x3) fchown(r2, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x4, 0x9bd5, 0xff, 0x0, 0x3}) futimesat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0xa71a, 0x4) write$UHID_INPUT2(r0, 0x0, 0x0) 08:25:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x3002}) fchdir(0xffffffffffffffff) r1 = socket(0x10, 0x0, 0x0) write(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000000080)="a4fafd8c64ad507c909f233f7417538156928ef7018c79b8976b2e4686604b", 0x1f}, {&(0x7f00000003c0)="4fe25484189da335e106d97476d0fbb422ce3861f0a3779ade157ac28d3a4cd61223090c3649d6e024ed7fb87ac66f35178553817984d72dd692b7fb1bc5ecfc4e7d7e45a1be08a71d7c682754147cc328a9616433c52d162d553338da0d3627008ce6f3fab285b506098224df503b65b68a6b79f22a4f0fdf0222dc779009f969154123e26ada3e0241c96e094f50f65d428f6e803cc37efd03a742d5e4151ead5f0f76d3aa85300805fcd8227c5c47563b5710c832fccca0bf81ca8e952ace10bc03dec5", 0xc5}, {&(0x7f00000000c0)="97ab39015b4b6fa6478cc1f696e24e2bba4f3a91f2e01ad2de3765c57863b72d23321afeec770414cbd1380b83432e88b15e4a", 0x33}, {&(0x7f0000000140)="3b405c8f9791514f86756af1bd869031fae2483f8d2e64210b3887becaec32a27feab2b360307a778b85a58db0b7fa035d115f99fa3a726e974052d8116c36a36c65235c60025a1627127d35c0bd2d624499ad12cf", 0x55}, {&(0x7f0000000340)="2f89c538315281b6edd276db1bf12c866122935213a3c9603b3fb77f78b91dab0a9e6732101beb54", 0x28}, {&(0x7f00000004c0)="7ce442529bb29a4230c768b1de91c4627468986e9547703fbfe8cb99eb2c740aed27d01f7cdd8318557f9a20", 0x2c}, {&(0x7f0000000500)="676f274d749293e70cec11decede58dc070138176f568de51f109dadbc317b6cfb6f546fe57ed58462cb0a25139d1a16dfc979507fbffb4464", 0x39}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="78149f7527f958e82df3d5baae9d54d55b5b2a68a4ae9582d189a673ae5d2d232d1b68103725b8c76b1a65b381926ad1b8b97adb1217914404257bbef9f635e73e3dcad3dd668749d22b9e7338f16751095c8d83259044b5d789e81e6a0ad8735f9fa699a47b434808b27adb9fea421b760f81f47daedaa6220494de8b762ed9bbd15e3528dc994e4b9233798053b958a444824e50d3106c5a68d819fd56", 0x9e}], 0x9, 0x401) r3 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000001680)=ANY=[@ANYBLOB="020d000010000000000000000000000003000612f800000002000000e00000010000000400000000080012000100df0000000000000000000600000003000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e0b4b1da6c1cbe910000010000000000000000f1eda63d54c6a28734788cc539fda95fa828310abd626b7e4e6dc6d5c5ab67c1b6a9b908"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 08:25:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x104) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x2, {0x2, 0x0, @multicast2}}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x8000006, 0x0, 0x0, 0x1}]}, 0x10) getpid() r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x0, 0x4, 0x5, 0x0, 0x6, 0x56, 0x8, 0xbe42, 0x5, 0x6}) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000380)='ns/ipc\x00') add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x10240) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000001380)=0xfffffffffffeffff) close(r6) unshare(0x2000400) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) flock(r8, 0x3) fchown(r8, 0x0, 0x0) ioctl$KDENABIO(r8, 0x4b36) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000001c0)={0xfff, 0x555e, 0x5, 0x1ff, 0x4, 0x30}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r9) 08:25:27 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)) inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r2, r2, &(0x7f0000000000), 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x0, 0x0}, 0x8) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socket(0x4000e, 0x8000000000004, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth0_to_team\x00', 0x100004}, 0x365) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket(0x1b, 0xb, 0x7) 08:25:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xfffefffffffffffc, 0x1007ff}) memfd_create(0x0, 0x1) memfd_create(0x0, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0x3a0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x2800000000}, 0x21, 0x3) r3 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr="ac021c0158eab1caa6e4f4989e3495ca"}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') sendfile(r3, r4, 0x0, 0x88001) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0x5b0908af46d3301a) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000700)={0x1}, 0x4) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0x20) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="00e903000000000ea57655f841c07d429e7d2e98e953b7c1e3d1f4b5beac799d9c49f2cc106b919cf97ca2300d00e4756552dcd0267a2d4e020006000fafe77f08cd8951000000000000001a00"/99], 0x8) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x200c2, 0xfffffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0x0) 08:25:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000007580)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000001600)=[@rthdr_2292={{0x14, 0x29, 0x39, {0x0, 0x0, 0x2}}}], 0x14}}], 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x7) 08:25:27 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000100)={0x6, 0x25, 0x7ff}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000007c0)="7c88b72d3db400773c9f10ba3cf45d1d65e8a22dc93f9dd0f645777182d6599228f2fab613884b7eedfc2738710a8b6008ec654a87a52465619e9329da90102de4a0b32d140ad0a824293a024a3ca5e576afefd06f54a2333ed474491bed7e69fbf84d64cf7bd53052dae0cb35799bd006a9c32073b1c70c63fef9cfe182d0fb0d255389f2efccd03b504c2ba0920bd68c0830c2ac0f25041c426be3feac5a9ee74732fd7692f04eabff7ea7c5390f6e68d982923a08b29d4cce22", 0xbb}, {&(0x7f0000000880)="659ebe9a8232bc3185edf8e62f7104ecc3e83cab8ca0b95ff3c86737fdcb7727cf5582e2aa9f57f512cb8612c769af08886a9a77019ea2776d2de81b3d7ddc1abccdd77f8a880a0c9c3d67821c50d47bafde969124cfe147aae09ec474fb41a43ca7092e24360ef4b47d85fd974d9b485015b48b0e09d5c0ea01704991a4e43bf18c0d6da3732c8f9de2312c7df5c3a27a3038f41b916e2dc8d853de5b6f5067f43c77d19bd6107583df4ce9778fb408f74ea09d4d6516013e69e3933882af1ce452e9c8a4a189ff0b333e458f673be9e6c7f02b95c84600b9af56d659e349cdb447", 0xe2}, {&(0x7f0000000980)="276b59e2d9a2d55497cefc12d94de27a99ee449558d12b2c926a5bdd92f2876ac2cf61a0445e2e34c97395caec6e13a4f8df31ecd126d7c697b5556e68caff8ebe14ce1bcddadd164a7caef4b283eb9f4a4415cfa0987db4098db3d8e215dd081b8507d91836301d18ea934903cee6fcf37ab863e27a8e9fecf57caf314dbd04e1a7d61163d541d591728250fec48ff1eacbcdbebc0ae7e6c2765eba77b8efdb6bb469f83f2c4bc1b5d62e9dcc591bcf5de26355cbe7d3f88fe3b15ef6", 0xbd}, {&(0x7f0000000a40)="58456fa5047764999764ae8459241aff6416ae457a24c35af9650e9a20409a5460", 0x21}, {&(0x7f0000000a80)="2b660acbaa8c3b7cec3f4e132b47ad656dd2d26e6af84b16ca68a358a9d316a9ddd991d9a320efb22bf731dc2c7c0e8c20ad161f6f854c660dd29a474a15c375e733b1f6620c052ce33bb6a8dd74966e034258fe154b4390d711c19d97e8ac01282172026729c12cfa71fac13acd3ad2380f46c015f7d64cdcfab6e916dc34", 0x7f}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="51368e6ccf006e9e74d59c6072695eb759ee5e4319d08574e35d6fb051cdee93a36a17c6d9981f21add832d659062a9fdf1b722e90a111f205f3d16d0b8df417501968c56171a105cf544a9f3d10003a3ca3535e26f574fc20bd171e2a04a118ec4b226a3e070d283c5e625c58d474cf463aa6139e1a15a8025f7715e7d4c26325485a7e948aaf464600399a080014e1fc39c01b819d793b3dbd9bb6b8944f75972c637b8adc4f9646b496d30cf2025c37d33f001f00a60ac51299d7c0182186d062897e705f083d649dea921ea0930937e904376d8e7a4d3f1680989ed390477b0380a43382a9a5b437f762ef4fd567c295b342062363f53b1b23e76ef52d7168315dea7aa953b78970122365752d50603ab269356fd7dc4217cfa13d49b59e8bee026e9f6c26b1a40d4cb31dc85fccb704bcc7a8a0f5404d4253de4c03d7a7a64e0d5fa85ab5ba636c0ac637777bd2a6b636c44c95b3063901e34aa31dbc91a74371c1ebe70b605ef3b41f150cf212d16383d337f06c66f34922066ce158c0c4d2f7ffc5cb0c8de720a186b6691c8a59839f6437aa7323e0fefc25e1669f1edf5506d1103aa7c2b761ddd414ff9ec3ce07236aba7da62142e664453d50be7cbe035b32b715b1ad56cfe3f7de8765d57933cff58f9ba4bf99445ea114038477f4eb193f87b8c65ba95f420e2de8d503b461d6aa6e55e28b73bb8636b09e8b82dfe27e29d357a07166331485f758f14e3136dd66bb1a4f17b11276e18cf0f93a6052eb20c16f083835f8dba8250a97d6c460c512788e026322c5b8c0b07c4e6ef5c502e8b2073df06f8357e7c3b9b652c376326d98369ee8cb1a2df847030acc08352206c5ba3427dbd66255b402d4167f06868b91705ceebecea305ed04a0957de9295c6c5712193f26207b0c978037db360087a1d6bd1181b88dac13aa816da3c14900d5d9af43782a9e3a36e1a1dbc132b32dc78536c780cf7f07d8b6188b0ef0726271c8a5e380a443bc19b22005b66516fa4cccbeb40dcee4cbcba0eb8b1dd4b2647f3fe1eac0d3df66a229e580b1b5069adc00f303184416faa27c5d6c2f18dd6186beeb2940098f9228b3fbc2561fe29d297a626683ff0ad59d18dfc2b1bab44ec5c457b4b49ba594821ffa3123658a58af3bbc474eb690797bb55213da4405f9942134b69a1928a81085e31003a907090c15fc790c936ac6dcf12b1f842060ac17eced2858dd3e926e75546a07ba9e57769c97773fab779f9f69a05f04817525f7b72200fc0b81c1cd4dd157993ab0d2fd6297605c93046c7fe43e2786e996a9e25691217d8b7fc4248f7c2723da86959689dfe9455b744157f273491e33f39e14d3e695bb34ef9514cbc9e9ee92c3a953de2e992ca2abaf9d7272e4d7ae65dcc5585aa5d5ae559a34e82b440fbc38e90ff363c2e9bcf9c0cd4248c4d5b78717d583c2aa64f5182bfa413f2b74538298df2ce02e10a44fcde3e62fbac6b1519ab3db28b93567f6e95c03ed58f580af44e96a84f1f9133dba980696ee1c3da41110759665a791c4bd6150b90675b1ef744f77ada772214fd8469b08c3f282d2db60ad8663ac2118621ece3f5c5661861cc767039f3acfbfca8368b0b5bdf2db5fc77ed4cd6f1a539ca9373f65c0c994edb4fa1b45c6b5cb323d1cbbc71c9c2363d93b5307e4b47ac8263536019db8572fdf813f5d3baa84c6c82e5c855d45e14b50cbb0bbbfa7b128442c09f34fa4be850f71c1a5635e3adc9ab46046d218ef300065f86dbf4d1eb8461ea94e1bd83606b3836adc5e625b6845b655ce0558bd0dc3be36dbec87f62fa26f1d0af789e44e9c0b4b437ae4fdf1e112cc4e1ce6b5f360840f60d35361697f04ece61fdcab9e66728f35871932c28a478e0b2ca7e52f84cb5544c4d879e0e37d8747a423d781120379afaabd8b673abfbde81e521375323ba1edb102b3778b425e5fe2d420fc55c3130a62b6f6b67bfd90f0170baf4ce01e1bb83be06441e97d99d31a474b8a9b83c623830093cf52fb4b19aac6c3290fe8b1b65eee5ddcb8212cbf7024a52f78d6b45f9a4f7a57ba5155ba21fd656e1ccda9983b7a3cf23c1c99633ffb9d57e8e742f06637465192e48c0d75c4cab63d3271beb0e51f082a6b0cfa8183eaed9298c55401c3ba9d9c85453038b281185d45a5e768dd277ff8c2de79a98cee5497a2a87c3761c94e2215b83b3deb27f92282a10678697911bcabfcbbe1df8f08d18e1e3c037e03fedbf2e8c49484b971f7c11864e3dcb467aab58c9ec86491f423e78d3e00be9946222c425dfe2b3aac05d5aedda5c2e986a87aea313ca0eaf2a21369b19200cf975ebbfc2410346fd3d87d7c4871599f52b969568671c74f99b7641015cb799afc487f6cb610bf595b0032e96db448bef5200b02c0ca993a12a1bc8f23d7aec6a477c0e41e4143ff06dcff396180b3b19925f9adab1ca81a2cd51f6de467fa44bf5aecd156561a5b64d6bcb4b20abad3f088d14a4cd709b27eb1587738737c185d24e5322897a4e6c429e59fa9097b8ce0d3d387e3e88fe2619a9ca2e191eca4f0ae54473bbe8ad73e1f475d6823e88a0d7b2b0807e0fc70366ae3270565b24514c51df2ced3d010906ec9fcdd8a21374a1d8540049ccb8b6cf4619d76c73e45fa1d008392f6867254b35ac37ac6f7ed3bb5403639e6e37ad7b8501828c1a2b4cb9875c90618f2944a77b2743d05f3694e9b4ba21c01bcd2d54668b20462a31c299a4874822e57f7d4650ca9d5ed44597e7ad0c710d9e8406b5f7ae1932b40b0f9b4ddf42012dd0f6d4d42aa41258b2652e6d620c6f3614054c9f0099c1777692c96b6eac5b6ccf5fb4bf1d7a8c5cb3c2e3df4c0ec9ea1a5f6e89ce038b29e8926ebd3ebf5139a33c166620ed626d058d07e50a5a34d3cd45f9add453af883d24631288ea9e14dfdfe2e4434dd5bcedfe00c47b886365ce1bf266238c49f6a391cf207387dccabb3ad68dca2d7ea84ba6f80d1187352bebda228331efea144bfd4d063b579b61ee3e8b19a480554efbe3ebcfb792d1ee5da09f75bd6fadb8f460f516e7c73240edc9c595a5790913bb470769430aae6a8fa66d995ef77bc09f24540840f37a0ba2dc9975ecd96e1170ac6de26e63de6bf4c1abcf24ba993868b7caabc2ec63c149545400d57865615c658739f0f30c1fcd0b280b7f43c42f522850ee2fa30fa623519d246387bf6b7ca2296ec3d5c8c0666ac605b06a3215fc885aea9aad1abf7fda628d20a95807193a931ee94b68e4dadd47ef685e685ed75d091626fe7e74c43b05ed43ec6edaa1cf840dfd4aa51fb7ad21d9b289cd8a08e3acdde9e0fa191c0b87cda14427e735ac2ee3c5410877f296406e014165402e2de55b3faaf173882e688c8dd28792d2492a757469d08997f7e85547bdaf2f9df6c92043638b7f524fa5154c3fae3659cc13a59765c7095454780815fbc42d74f798e6863047af638692fd6727999f3530fca8188ac022c27222b35d494d5271128c762b8ddc35814ff757f6c11a181c241bce0f615a9b6eb4e96593618290ae05fce3da5282256474764f5f4fa30ab44bed0b0fffceccd387b81854a9b1e12e0646b0a6f6bb483dacbb80931f3e87bdd425675ba84b9ec635c200a6536d5306a4887260fa6949ebbfb162937ab71ab3f5ba6b129634928a00ca16870563d57d7b3af2aa48b7747f6c5c3f543ee6714cecb2e8dca3cb14687a9545d13c7e007994696d93167abba4090c615b63be7acd3602ffb5647eceb971dc4ce02d6ab4c7356bb360027eb0697aec2ba32d6a8d2daecb44b8a6c9499b54a5d891862641d828fc873d743072343ae2423584a40fd47cf4ba6dbb6c23899619d4ed413bd59c723737ffa3fcae615d8bc743a29849365ce23408fd6c29e620b5b4b7a48a0e79013b038541a24865345a8ede9c854dd7b56f4ffe78cd01dbc20dc546db00322f18542dfe79fb71a97d0d94e1b2cb229d9bf8b5148552a009e96bd04b3c47a73f888ff843bf6984f31a46a7790bc4b9c89dde79656d1a364503cb20b6579a193304d3ea1e224c57e417353d9e4660d07796da0ec873191ddf35621ca99654d309a7c75d85e7534aeedb07b5ff2943874b0cb342a90c0b5588fbf864cfb3b285c7c64c39ee23e932f9cf6f10395f080c845b4368fe1522365d9b549eb570a76370ca7ca525a2cfe5551312572cb97d6bfdf71cc1c845fc23188498e3839ad4d23db9c824656f3ee451f222a7a764d41e2eb6f7bba1c03d84a649b2d384e2d2263fff8d2597847cce699b3601f465eae3da9cb6d2695c5af69cdd4c608a92c9fa3570abf580362830986ecf64ecd07a45632bb06cb8beaccde3cc205aee2f153c451a022442e0cae3f0013162a1554463cb5b469f59ae5ad849dc8fda190bac72bfb581b8dbe7927eaabb531a7059525e55201fe3d9ecef2fefac2f89d750279ee6ce5770f573bb56ca8ac5f52bd81e12b73f0f12f5c1862980b0dbae195c8c4a2bd38f143d1245e7053a5e8bef86ce767b72316ed012b66343b3d5f615ad347577cf4dfdb1b5899192b9dab8dd9be1f45033a34948f0b7386fea68f3839ac9e6f05764bfd842f1902c14e5f4574205920830a97d98e42df8662e4f12d50229ab539a7a57ce1080970f827555f0ff7fffc4fb3435dc60ce08231f63c7982aa7b31cc713f44699de8f217f2f71f52ea29e773a2b09b0ec69a1d6a233bcb628b606b7aa53a010b56d0e1b6f93740d76784b99275e0b21bf1aa114a5c5f9173b53cd74f65edbd10be6b01c946b5e769e4974282ef57021a8f96e40b87099e5808b8166a94e0e6dd55e989ced41014ca272c52aef836c065823c540366b0131737f5d9b372742d26f567943c76854b9de1644e80a5ce47147488afac06b14e38990018b5f5c4f811c7a9a8a88f1743c867dbc1c41ce1660cac368d704c6744f327efbac17813930ac3ba60367a0581cc72214f3a3aa0dbbe3987a8c2489b5a819c7dd68547a9791722717b7d53e7861dd0ebdf696f3786cf056ee2254112ac6a862f0ba31a069d89c56231b456680810586a5ba2988ec3a42bcf713ca62a31cca00d0583f5e9078efc0bba40949eb119a46e4cdbf5605704e4a0357ce331856dfaca84b164cf59f9e8d844c4ab7ba5ef21f3e5a2bc8b8382c02739d5904e5e130988ee4d41475a649e981dd002d6d7a5fc5fead270606cd0a933254cd483f3061eeb7ef2d13c65cc14c13c681a91c5675d74aa8e1c680f12d37a055c39171605640c60a69b328dc13c5f3464deaeb7e45e7e5219b43262c703c6a46aa12d8c46415647a63c2c38a2c219de39d09e25c5d45262aab2a870ac6d5bc56ef05b9b499115de872b7d71ff1da9db4eaa0793c7680434fa9b34aaa57e57adb9ddb54159652867d4484a52df691e997fd0cfec6b8acb3246d8af95a9fc4b60d7438ea2b4afc76fd1ed9613f2be2e91bf9beb9e5126c191101bcf77496d836e9e31c2eed4b35aa7f3807142600d54985cd243407d6cf61a38f4c29666d96a093a0124fe506b52bf57e201f5216bb23f2bcdafa1493df0fb91fddd5621ffbb02400bcd39630668da900c726bc2a18aea1f83145a5a8ad77ef3d283575776250c98c7ab047ba434c3107cda78cd7dd5444b112081fb9ca78f50fd9e4d1c57206bbb6e7c07bf9c75e9e7fa9a10b8b08d94787bb6f7b373930540ddfc91bbde161c45e9e3b65cbbae06d41fe0cf661301973cf43bf97caee09583567392e688cc56e200f9402dc881ba2abe9345724e", 0x1000}, {&(0x7f0000002b00)="d0207ea93527ec84b5af57fe15f68fe6e715c2135a448cab596cba58635d81dbddc45b15d6fe02a972c8554c7a67f0da5bf66d3bcffd46d8ba95e699", 0x3c}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)="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", 0x1000}], 0xa, &(0x7f0000003c00)=[@txtime={{0x14, 0x1, 0x3d, 0xfff}}, @txtime={{0x14, 0x1, 0x3d, 0x1000000000}}, @mark={{0x10, 0x1, 0x24, 0xff}}, @mark={{0x10, 0x1, 0x24, 0x2}}], 0x48}, 0x10000080) r1 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000100000000000000000000000300000000000000000000000000000006000000576adacfc686e97da33fd400"], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 61.080460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.121711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.156741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:25:27 executing program 1: clone(0x2102805ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) flock(r1, 0x3) fchown(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "33eb5f5ae633fba2", "ae1ed9eb8ab046a05dcc9b2a8b9533bd", "1ce49ee2", "955c3bee7ff26a6a"}, 0x28) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='map_files\x00') exit(0x0) capset(&(0x7f0000560ff8)={0x20071026}, &(0x7f00003fd000)) openat$cgroup_ro(r3, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) 08:25:27 executing program 2: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xfffffffffffffe54) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/113, 0x71, 0x0) r0 = socket$inet6(0x10, 0x0, 0x3) fallocate(r0, 0x8, 0xe2, 0x7) sync_file_range(r0, 0x0, 0x7, 0x9a932c0a79268e1e) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000040000000000000000000000040000000000000000000000000000000400"/44], 0x2c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80585414, &(0x7f0000000500)=""/131) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) [ 61.189545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.387765] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 08:25:27 executing program 5: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000003c0)="eb900d9d4f80d0643e6a119761b02e7ab6bda3cc8e7117e4ccfa1740afe8fdaf7bdbfe73a0f701cc68ec49ff7cd27f8dc8dd0191f2b648de5959bda88ffeaac63ca761efd0456672b104a3a6aeffc058209ee972dcd08a9d9b21b12df9084f1feb17ded04e925fc79a6e8c6876ceca0a6dccd36bbe6eb297fd618a6d78d3e823c32abaa000205d442703d3b0d28e1b2d7122c220dc5e8140cb29f99e4c798b4eee736389207ed2156854ac88a184dc67f0764d0ac8ddc4f1680656dac5733a0c69f81d5bb728d54cfd3be5c517a0cd74b6a4db80ecbac3f6b9f60a63e5620936cd2c7f84", 0x23b60739) write$evdev(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x825e, 0xfffffffffffffda3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) ioctl$TCSETAW(r2, 0x5408, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000380)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) getsockname$inet(r5, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) sendfile(r4, r3, 0x0, 0x2000005) r6 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x100) write$P9_RLERRORu(r6, &(0x7f00000004c0)={0x14, 0x7, 0x1, {{0x7, 'trusted'}, 0x8}}, 0x14) read(r4, &(0x7f00000005c0)=""/193, 0xc1) dup2(r4, r0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/user\x00', 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x100000000, 0x9, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:25:28 executing program 2: socketpair$unix(0x1, 0x400000001, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\'c\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1f) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, 0x0) vmsplice(r5, &(0x7f0000000100), 0x0, 0x0) fchdir(r2) creat(&(0x7f00000001c0)='./bus\x00', 0x33) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x10) sendfile(r6, r7, 0x0, 0xfffffffb) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000001980), &(0x7f0000001a00)=0xfffffffffffffd8b) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000018c0)={'vcan0\x00', 0x100}) 08:25:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0x80) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'veth1_to_bridge\x00', {0x2, 0x4e20, @broadcast}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) syslog(0xa, &(0x7f0000000680)=""/4096, 0x1000) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) sendfile(r5, r6, 0x0, 0x80000001) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 08:25:28 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) accept4$packet(r0, 0x0, 0x0, 0x80000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0xfffffffffffffe12) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x2f) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_ifreq(0xffffffffffffffff, 0x19bbd, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) prctl$PR_GET_THP_DISABLE(0x2a) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10009400, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0xfffffffc], [], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xba6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz1\x00\x00\x00\x00\x04\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect(r7, &(0x7f0000000180)=@nl=@unspec, 0x80) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r9 = dup(r7) sendfile(r9, r8, 0x0, 0x523) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001840)=ANY=[@ANYRES64=r6], 0x1) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clone(0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000001400), 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) flock(r10, 0x3) fchown(r10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[{0xaa, 0x9, 0x80, 0x3ff}]}, 0x20f) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r3, &(0x7f00000001c0), 0x74c17b66) read(r2, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) 08:25:28 executing program 1: socket$inet6(0xa, 0x0, 0x40000000000000) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'r_1\x9b\xe0\x00\x00\x04\x00\x00\x00\x00\x00\x00\xff\xe8', 0x10, 0x4, 0x76}, 0x2c) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000480)='./bus\x00') write(r1, &(0x7f00000001c0), 0xffffffe0) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) prctl$PR_SET_TSC(0x1a, 0x1) write$selinux_create(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374654d5f753a6f626a6563745f723a73797374656d645f6c6f67696e645f657865635f743a7330202f7362696e2f6468636c69656e74203030304fc462b670416a52303030303030303032202e2f62757300"], 0x55) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x10) personality(0x2000000) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r3, 0x200005) sendfile(r2, r3, 0x0, 0x8000ffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) io_setup(0x7fff, &(0x7f00000000c0)=0x0) io_destroy(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 08:25:28 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) flock(r0, 0x3) fchown(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1840000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="9de565fc2681b7b3263bb177f69fb1a31f9a1358c173d32e770a011429334b38f35c3f0dd11bf675b03473c494dd221c5249571ffe7f48e0b30cfa6f627f9d7c4756a37791ea", @ANYRES16=r1, @ANYBLOB="00022bbd7000ffdbdf2501000000080006000000200534000100080002002e000000080004004e240000080004004e240000080004004e210000080009006a00000008000500040000000c00020008000800050000000c0002000800070020000000400001000800050004000000080006006e710000089f746dcb0100000000000800090007000000080006006468000008000200000000000800050002000000d67653bbf9ce75ae3a72d350cee94690277dd74bfbae57227cea8920921253426c95e239839b0860a39adf8378ea81d81ad039fded9e96d023a66b"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xfffffdc9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x2}, 0x1c) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000180)='oom_score_adj\x00') exit(0x0) write$cgroup_pid(r4, &(0x7f0000000200), 0x12) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr="ffe8ff0000001b000000000000000002"}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x216) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x5, 0x2, 0x2, 0xf, 0x80000000, 0x401}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000280)="b3", 0x1, r7) r8 = add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r7) add_key(&(0x7f0000000540)='cifs.idmap\x00', 0x0, &(0x7f0000000a80)="4ff33f25152878f47a067f4930e02814e7786836bf9b51f474908236b9a5fee472c76e22ab0ab4b80e7c9358dece03a3e05043e5426408b1b56139a703689c40617eb20bae08e7efdff8fd3c4ce95ffa1b8afaac23bd3adbd6439469c036e4c59608438f56d705429761de1f80820f5eea666fe848684f7a6422def1a0c4094e9c9bb4708d855c35e99c94c190205bb345e9168cabb7c2566ec2db8911b316e4b380a8e906e8085d56fa4b8421ba8eb521aca65ec476ef39fe037742c6a5134415e3e58e", 0xc4, r8) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000006180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4d81d9a5de484ea4}, 0xc, &(0x7f0000006140)={&(0x7f0000000680)=ANY=[@ANYBLOB="3a30033bfb4a24efc8bd9c48f1c1c1cd31f850bb1c7bc0c34abbc7a311f477dbe74b4775b545583f57555976d1ac81dfc2528edb2f72253b7a1ce8dff135cdc7097d2dcc4e2b1e67bd4712bd06bc8a08a544708b18c2ba528d0aa4dab57f059aaaba096e5af323764023bfb3ddefe4798feda669e490035d681ae98760d41438c14b1f55bfa72cc5ab81ac41b92c9f2f4f7fce9e5fe689a8aa39b16218bda5e1ced4e9101e77af5216", @ANYRES16=0x0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="4152afd90bf201bb810642b76eb1e7a78a9d267e869aa1a647282ef3bf5fdb6a44cfde0131d56ac50d07d166c79d0ada5e0178fb4d92a9527ed71234984c27461157b5658ee2c6d38fa3b81012bf7c075e1d7a50ccc9ea8a001ae49c5d7a0833ec51d9de6a1b72d3fcd50eecd2e1e0c714354a430b7f40d825af26a91d5d00ef35080f4efb9524f376e0d038277899473b09e5dc1e19784d2bd1bb", @ANYRES16=r1, @ANYRESDEC=r8]], 0x3}}, 0x4008000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x100, 0x0) ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000000300)="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") getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) r10 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 08:25:29 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x1fd) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) memfd_create(0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x0, 0xfffffffd, 'lbqwI\x00', 0x10, 0x10}, 0x2631461277a077) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) writev(0xffffffffffffffff, &(0x7f00000013c0), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') writev(0xffffffffffffffff, &(0x7f00000013c0), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) writev(r3, &(0x7f00000005c0), 0x0) r4 = socket$inet6(0x10, 0x0, 0x3) fallocate(r4, 0x8, 0xe2, 0x7) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) flock(r6, 0x3) fchown(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x0, 0x0) sendfile(r5, r4, 0x0, 0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x24c0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) flock(r9, 0x3) fchown(r9, 0x0, 0x0) write$FUSE_BMAP(r9, 0x0, 0xffffffffffffff62) write(r8, &(0x7f00000001c0), 0x22b) read(r7, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)=0x3, 0x4) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={@empty, 0x73, r10}) r11 = socket$inet6(0xa, 0x400000000001, 0x0) close(r11) socket$netlink(0x10, 0x3, 0xa) r12 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2) ftruncate(r12, 0x200004) sendfile(r11, r12, 0x0, 0x8000ffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffffffffffff, @remote, 0x2}, 0x1c) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8006, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) 08:25:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r1, 0x5f2be000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1a8, r2, 0x801, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xb695, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @local, 0x3}}}}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'i\t\xe3'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25f2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc1}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000041) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) flock(r5, 0x3) fchown(r5, 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000400)={0x0, 0x0}) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000440)=r6) flock(r3, 0x3) fchown(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) flock(r7, 0x3) fchown(r7, 0x0, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000180)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x380000, @empty}, 0xfffffffffffffed1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x800, 0x1}, 0x20) [ 62.602320] syz-executor.3 (2392) used greatest stack depth: 23808 bytes left 08:25:29 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x8881) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x800000000000205, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x9, 0x400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) getrlimit(0xb, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='\x00\xa1\x005\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r2, 0xcd9a, &(0x7f0000000180)={'rose0\x00', @ifru_mtu=0x7}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, 0x0) dup3(r1, r4, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) 08:25:29 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x7}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(0xffffffffffffffff, 0x8008200) gettid() r3 = socket$inet6(0xa, 0x2cbdf1a0d4ccb49a, 0x100000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/528]) syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0xcd5bdfa325dfed88) r7 = socket$inet6(0x10, 0x0, 0x3) fallocate(r7, 0x8, 0xe2, 0x7) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2e, &(0x7f0000000640)}, 0x8) r8 = socket$inet6(0xa, 0x2, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x8}}, 0x18) write$binfmt_elf32(r8, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) set_robust_list(&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0xc) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="6deb098bf20000000000bb1b6f90a2d2562537037f12f29ee10c0a99689acd940a8e7fafdb91b37f00b7c09133fd73816117780fcce0b1f8f113e125d029e3958b6a00ade8c6af25048a0eb56d166f6649ddeecdfe53ba447ccd0029f9b4d8a82043f68e533b0e9eee48f693e3cdb6b930af79dd0ff777188a146332b4767234000000000000"], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) flock(r9, 0x3) fchown(r9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) flock(r10, 0x3) fchown(r10, 0x0, 0x0) ioctl$UI_SET_PHYS(r10, 0x4004556c, &(0x7f00000001c0)='syz0\x00') sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x02\xdf\x01\x00', 0x40f}) [ 62.806084] audit: type=1400 audit(1575275129.221:9): avc: denied { create } for pid=2497 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 62.846233] audit: type=1400 audit(1575275129.251:10): avc: denied { write } for pid=2497 comm="syz-executor.3" path="socket:[8114]" dev="sockfs" ino=8114 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 08:25:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)='fuseblk\x00', 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="2c64ca31f055b84e7d106169dd0b3898f297d94240644c6e8d384b96f6c6545cba6dc334370ce9a04f21c45caa52d611b87bf4a637184cec4682e8e227b626088714b09ab07a9231fff0695728a81055f29432b16ce6c027f94b4695b612ee123cd9ba4afab65618c3d4db184e94808013991f9cbd7345ab60f5aa1a16bb891a31e2b290921bd55a79682cd04c78f859bd50"]) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 08:25:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x400000, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x140}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f0000000380)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140)) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000006c0)=ANY=[]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000680)={0x1, r8}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x3) r10 = socket$inet6(0x10, 0x0, 0x3) fallocate(r10, 0x8, 0xe2, 0x7) r11 = socket$inet6(0x10, 0x0, 0x3) fallocate(r11, 0x8, 0xe2, 0x7) r12 = openat$keychord(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/keychord\x00', 0x200180, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000005c0)='autogroup\x00') ppoll(&(0x7f0000000500)=[{r13, 0x100}, {r0, 0x4}, {r10, 0x221}, {r11, 0x4}, {r12, 0x1000}], 0x46, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @rand_addr="0000000000bd6e80000400"}, 0xfffffffffffffe58) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={0xfffffffffffffff8}, 0x8, 0x80000) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0xba03ea20fd92a01a, 0x0) fstat(r14, &(0x7f0000000540)) socket(0x10, 0x0, 0xe3) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') 08:25:29 executing program 3: gettid() r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r2 = creat(0x0, 0x0) write$P9_RREAD(r2, 0x0, 0x22d) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f00000001c0)=0x20484030) read(r2, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x814c01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000040)=0x4) [ 64.424841] [ 64.426512] ====================================================== [ 64.432824] [ INFO: possible circular locking dependency detected ] [ 64.439215] 4.4.174+ #17 Not tainted [ 64.443039] ------------------------------------------------------- [ 64.449433] syz-executor.5/2549 is trying to acquire lock: [ 64.455048] (sel_mutex){+.+.+.}, at: [] sel_read_policy+0x59/0x110 [ 64.463579] [ 64.463579] but task is already holding lock: [ 64.469556] (sb_writers#4){.+.+.+}, at: [] do_sendfile+0x8a6/0xba0 [ 64.478291] [ 64.478291] which lock already depends on the new lock. [ 64.478291] [ 64.486592] [ 64.486592] the existing dependency chain (in reverse order) is: [ 64.494205] -> #4 (sb_writers#4){.+.+.+}: [ 64.499296] [] lock_acquire+0x15e/0x450 [ 64.505635] [] __sb_start_write+0x1af/0x310 [ 64.512397] [] ext4_lazyinit_thread+0x1e4/0x7b0 [ 64.519464] [] kthread+0x273/0x310 [ 64.525341] [] ret_from_fork+0x55/0x80 [ 64.531603] -> #3 (&eli->li_list_mtx){+.+...}: [ 64.537016] [] lock_acquire+0x15e/0x450 [ 64.543413] [] mutex_lock_nested+0xc1/0xb80 [ 64.550212] [] ext4_register_li_request+0x2fd/0x7d0 [ 64.557519] [] ext4_remount+0x1366/0x1b90 [ 64.564035] [] do_remount_sb2+0x41b/0x7a0 [ 64.570474] [] do_mount+0xfdb/0x2a40 [ 64.576522] [] SyS_mount+0x130/0x1d0 [ 64.582605] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 64.589814] -> #2 (&ext4_li_mtx){+.+.+.}: [ 64.594681] [] lock_acquire+0x15e/0x450 [ 64.600979] [] mutex_lock_nested+0xc1/0xb80 [ 64.607586] [] ext4_register_li_request+0x89/0x7d0 [ 64.614964] [] ext4_remount+0x1366/0x1b90 08:25:31 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x163242, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r1, 0x4, 0x40400) write$FUSE_WRITE(r1, &(0x7f0000000080)={0xfffffffffffffec2}, 0xfffffffffffffe53) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') keyctl$session_to_parent(0x12) 08:25:31 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000600)=""/192) r7 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file1\x00', 0x0) ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20402, 0x0) r9 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getegid() getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r13 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200c106b200695b0000009a91c28245b800000200e692c339000000000000000000000000000000ddff000000000000000000", @ANYRES32=0x0, @ANYBLOB="020063e83bb6b74f5bb59bf7db46411319b019091994d6b6fcc2500f03cf7977bd291fb1ca32e7dcafb8d16f79121cf717c9ed528b", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="3f00040b", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000000d988d57e9d642300018440ae2169932f6cf190ddd19f31a99355e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e879fcbb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0928098913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioprio_set$uid(0x2, 0x0, 0x9) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) 08:25:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)='fuseblk\x00', 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="2c64ca31f055b84e7d106169dd0b3898f297d94240644c6e8d384b96f6c6545cba6dc334370ce9a04f21c45caa52d611b87bf4a637184cec4682e8e227b626088714b09ab07a9231fff0695728a81055f29432b16ce6c027f94b4695b612ee123cd9ba4afab65618c3d4db184e94808013991f9cbd7345ab60f5aa1a16bb891a31e2b290921bd55a79682cd04c78f859bd50"]) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 08:25:31 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:31 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r5 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r7, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) read(r8, &(0x7f0000000000)=""/250, 0x128b9372) close(r6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r12, 0x3) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x2) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) [ 64.621415] [] do_remount_sb2+0x41b/0x7a0 [ 64.627900] [] do_mount+0xfdb/0x2a40 [ 64.633907] [] SyS_mount+0x130/0x1d0 [ 64.639901] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 64.647117] -> #1 (&type->s_umount_key#34){++++++}: [ 64.653125] [] lock_acquire+0x15e/0x450 [ 64.659408] [] down_read+0x42/0x60 [ 64.665255] [] iterate_supers+0xe1/0x250 [ 64.671615] [] selinux_complete_init+0x2f/0x31 [ 64.678493] [] security_load_policy+0x69d/0x9c0 [ 64.685470] [] sel_write_load+0x175/0xf90 [ 64.692004] [] __vfs_write+0x116/0x3d0 [ 64.698437] [] vfs_write+0x182/0x4e0 [ 64.704466] [] SyS_write+0xdc/0x1c0 [ 64.710394] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 64.717644] -> #0 (sel_mutex){+.+.+.}: [ 64.722243] [] __lock_acquire+0x37d6/0x4f50 [ 64.728874] [] lock_acquire+0x15e/0x450 [ 64.735146] [] mutex_lock_nested+0xc1/0xb80 [ 64.741774] [] sel_read_policy+0x59/0x110 [ 64.753008] [] do_loop_readv_writev+0x148/0x1e0 [ 64.759989] [] do_readv_writev+0x573/0x6e0 [ 64.766530] [] vfs_readv+0x7a/0xb0 [ 64.772382] [] default_file_splice_read+0x3ac/0x8b0 [ 64.779702] [] do_splice_to+0xff/0x160 [ 64.785894] [] splice_direct_to_actor+0x249/0x850 [ 64.793038] [] do_splice_direct+0x1a5/0x260 [ 64.799663] [] do_sendfile+0x4ed/0xba0 [ 64.805859] [] compat_SyS_sendfile+0x144/0x160 [ 64.812746] [] do_fast_syscall_32+0x32d/0xa90 [ 64.819553] [] sysenter_flags_fixed+0xd/0x1a [ 64.826286] [ 64.826286] other info that might help us debug this: [ 64.826286] [ 64.834435] Chain exists of: sel_mutex --> &eli->li_list_mtx --> sb_writers#4 [ 64.843119] Possible unsafe locking scenario: [ 64.843119] [ 64.849168] CPU0 CPU1 [ 64.853915] ---- ---- [ 64.858591] lock(sb_writers#4); [ 64.862440] lock(&eli->li_list_mtx); [ 64.869099] lock(sb_writers#4); [ 64.875449] lock(sel_mutex); [ 64.878889] [ 64.878889] *** DEADLOCK *** [ 64.878889] [ 64.884943] 1 lock held by syz-executor.5/2549: [ 64.889598] #0: (sb_writers#4){.+.+.+}, at: [] do_sendfile+0x8a6/0xba0 [ 64.898819] [ 64.898819] stack backtrace: [ 64.903310] CPU: 1 PID: 2549 Comm: syz-executor.5 Not tainted 4.4.174+ #17 [ 64.910311] 0000000000000000 87d43a9219507906 ffff8801d1337020 ffffffff81aad1a1 [ 64.918367] ffffffff84057a80 ffff8801d0c00000 ffffffff83ab8870 ffffffff83abc1d0 [ 64.926420] ffffffff83ac8080 ffff8801d1337070 ffffffff813abcda ffffffff83e1ed80 [ 64.934482] Call Trace: [ 64.937067] [] dump_stack+0xc1/0x120 [ 64.942432] [] print_circular_bug.cold+0x2f7/0x44e [ 64.949020] [] __lock_acquire+0x37d6/0x4f50 [ 64.955007] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 64.961351] [] ? kasan_kmalloc.part.0+0x62/0xf0 [ 64.967703] [] ? trace_hardirqs_on+0x10/0x10 [ 64.973798] [] ? ext4_chunk_trans_blocks+0x30/0x30 [ 64.980398] [] ? __module_text_address+0x13/0x140 [ 64.986923] [] lock_acquire+0x15e/0x450 [ 64.992558] [] ? sel_read_policy+0x59/0x110 [ 64.998546] [] ? sel_read_policy+0x59/0x110 [ 65.004535] [] mutex_lock_nested+0xc1/0xb80 [ 65.010521] [] ? sel_read_policy+0x59/0x110 [ 65.016554] [] ? kasan_unpoison_shadow+0x35/0x50 [ 65.022978] [] ? fsnotify+0x85c/0x10c0 [ 65.028530] [] ? mutex_trylock+0x500/0x500 [ 65.034429] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 65.042932] [] ? rw_copy_check_uvector+0x221/0x2b0 [ 65.049544] [] ? __fsnotify_inode_delete+0x30/0x30 [ 65.056129] [] sel_read_policy+0x59/0x110 [ 65.062637] [] ? selinux_file_permission+0x2f5/0x450 [ 65.069408] [] do_loop_readv_writev+0x148/0x1e0 [ 65.075738] [] ? security_file_permission+0x91/0x1e0 [ 65.082513] [] ? sel_fill_super+0x6d0/0x6d0 [ 65.088511] [] ? sel_fill_super+0x6d0/0x6d0 [ 65.094495] [] do_readv_writev+0x573/0x6e0 [ 65.100399] [] ? vfs_write+0x4e0/0x4e0 [ 65.105945] [] ? __lock_acquire+0xa4f/0x4f50 [ 65.112013] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 65.118779] [] ? __alloc_pages_direct_compact+0x220/0x220 [ 65.125975] [] ? trace_hardirqs_on+0x10/0x10 [ 65.132137] [] vfs_readv+0x7a/0xb0 [ 65.137333] [] default_file_splice_read+0x3ac/0x8b0 [ 65.144008] [] ? generic_file_splice_read+0x1d0/0x1d0 [ 65.150855] [] ? __module_text_address+0x13/0x140 [ 65.157358] [] ? is_module_text_address+0x2c/0x50 [ 65.163863] [] ? page_cache_pipe_buf_release+0x70/0x70 [ 65.170808] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 65.177139] [] ? save_stack_trace+0x26/0x50 [ 65.183125] [] ? kasan_kmalloc.part.0+0x62/0xf0 [ 65.189566] [] ? kasan_kmalloc+0xb7/0xd0 [ 65.195442] [] ? __kmalloc+0x141/0x330 [ 65.201011] [] ? alloc_pipe_info+0x339/0x420 [ 65.207084] [] ? splice_direct_to_actor+0x66e/0x850 [ 65.213764] [] ? do_splice_direct+0x1a5/0x260 [ 65.219918] [] ? do_sendfile+0x4ed/0xba0 [ 65.225675] [] ? compat_SyS_sendfile+0x144/0x160 [ 65.232200] [] ? do_fast_syscall_32+0x32d/0xa90 [ 65.238658] [] ? sysenter_flags_fixed+0xd/0x1a [ 65.244912] [] ? fsnotify+0x85c/0x10c0 [ 65.250473] [] ? schedule+0xab/0x1d0 [ 65.255863] [] ? security_file_permission+0x91/0x1e0 [ 65.262774] [] do_splice_to+0xff/0x160 [ 65.268335] [] ? generic_file_splice_read+0x1d0/0x1d0 [ 65.275193] [] ? generic_file_splice_read+0x1d0/0x1d0 [ 65.282161] [] splice_direct_to_actor+0x249/0x850 [ 65.288682] [] ? generic_pipe_buf_nosteal+0x10/0x10 [ 65.295364] [] ? do_splice_to+0x160/0x160 [ 65.301184] [] ? rw_verify_area+0x103/0x2f0 [ 65.307173] [] do_splice_direct+0x1a5/0x260 [ 65.313276] [] ? splice_direct_to_actor+0x850/0x850 [ 65.319971] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 65.326821] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 65.333419] [] ? __sb_start_write+0x14f/0x310 [ 65.339573] [] do_sendfile+0x4ed/0xba0 [ 65.345123] [] ? __compat_sys_pwritev64+0x170/0x170 [ 65.351798] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 65.357965] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 65.365077] [] compat_SyS_sendfile+0x144/0x160 [ 65.371411] [] ? SyS_sendfile64+0x150/0x150 08:25:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 08:25:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 08:25:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) [ 65.377412] [] ? do_fast_syscall_32+0xd6/0xa90 [ 65.383658] [] ? SyS_sendfile64+0x150/0x150 [ 65.389643] [] do_fast_syscall_32+0x32d/0xa90 [ 65.395834] [] sysenter_flags_fixed+0xd/0x1a [ 65.460084] EXT4-fs error (device sda1): mb_free_blocks:1466: group 5, inode 16484: block 164864:freeing already freed block (bit 1024); block bitmap corrupt. [ 65.474975] EXT4-fs error (device sda1): ext4_mb_generate_buddy:756: group 5, block bitmap and bg descriptor inconsistent: 29698 vs 29708 free clusters [ 65.489643] EXT4-fs (sda1): pa ffff8801d6f006c0: logic 0, phys. 164864, len 512 [ 65.497686] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3814: group 5, free 512, pa_free 502 08:25:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)='fuseblk\x00', 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="2c64ca31f055b84e7d106169dd0b3898f297d94240644c6e8d384b96f6c6545cba6dc334370ce9a04f21c45caa52d611b87bf4a637184cec4682e8e227b626088714b09ab07a9231fff0695728a81055f29432b16ce6c027f94b4695b612ee123cd9ba4afab65618c3d4db184e94808013991f9cbd7345ab60f5aa1a16bb891a31e2b290921bd55a79682cd04c78f859bd50"]) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 08:25:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000326bd7000fcd0df2501000000000000000080000000000000b0d873e040ac9e210342715a496926847d8edff51f9445ba878f615a78ff4694372e2ce5c1fe849184c183a209000000000000000032be93cbc929301f0dfcb39141ae5c94583d24be3b73e4d82bbe166cc9681115a342b8481248fd3df5ecf7a34db4b3ac8686d8b5e84fe3eded7d0244a4a332c4e2186ad0ae73cf3726bb5fe91756e3c9d479392542e83a2f678a426bf8828d8dcaf650c28e5b9af0119215800d9a7316e4972632155889e0af65f6cd0d402b936a6df8f749ca2608ea936e862025546e15b33b29d137032d8e18796f77ed86f39c46e1cbea9df0413d8551b94aae0acd640b9d2efb6a97e5e5f50500dbe5c3a51d5cc3d3938d697f9d8ecd631a62cb5a58ddc8d8cf669c212063bd70ce890ba4be44cff53ab262ef43f84ae6ff62f05a0bc3a57a88bdc3fd9f96de780b12a5ff1ffe4207c05f6ece60f6eaf9ed2cf034eb09fe2f9a99d69deafa5eaac14545a720fa70810782fc67de1ca168a0c5f6ef84c2252333b0cf6a4b3d45eabe361c09b4387d4caff18efe4d8353aa7819950f7b25d7cac939157c2d8609c2c4236bc2d94535febacc1c689d4addceefab3c56d74a29acec51171b22048a06cb8cbe4397a64f3392b8f9e905370969bbffd1dfef0250981e45f09aac7484890000006cc0ea799b8dea9953f8000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 08:25:32 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r5 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r7, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) read(r8, &(0x7f0000000000)=""/250, 0x128b9372) close(r6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r12, 0x3) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x2) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) 08:25:32 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 08:25:32 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000600)=""/192) r7 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file1\x00', 0x0) ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20402, 0x0) r9 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getegid() getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r13 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200c106b200695b0000009a91c28245b800000200e692c339000000000000000000000000000000ddff000000000000000000", @ANYRES32=0x0, @ANYBLOB="020063e83bb6b74f5bb59bf7db46411319b019091994d6b6fcc2500f03cf7977bd291fb1ca32e7dcafb8d16f79121cf717c9ed528b", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="3f00040b", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000000d988d57e9d642300018440ae2169932f6cf190ddd19f31a99355e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e879fcbb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0928098913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioprio_set$uid(0x2, 0x0, 0x9) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) 08:25:32 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r5 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r7, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) read(r8, &(0x7f0000000000)=""/250, 0x128b9372) close(r6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r12, 0x3) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x2) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) 08:25:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 08:25:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) 08:25:33 executing program 0: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:33 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r5 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r7 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r7, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) r10 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r10, 0x0) read(r8, &(0x7f0000000000)=""/250, 0x128b9372) close(r6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r12, 0x3) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x2) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) 08:25:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:33 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:33 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000600)=""/192) r7 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file1\x00', 0x0) ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20402, 0x0) r9 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getegid() getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r13 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200c106b200695b0000009a91c28245b800000200e692c339000000000000000000000000000000ddff000000000000000000", @ANYRES32=0x0, @ANYBLOB="020063e83bb6b74f5bb59bf7db46411319b019091994d6b6fcc2500f03cf7977bd291fb1ca32e7dcafb8d16f79121cf717c9ed528b", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="3f00040b", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000000d988d57e9d642300018440ae2169932f6cf190ddd19f31a99355e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e879fcbb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0928098913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioprio_set$uid(0x2, 0x0, 0x9) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) 08:25:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:33 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r11, 0x3) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x2) fdatasync(r4) 08:25:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000326bd7000fcd0df2501000000000000000080000000000000b0d873e040ac9e210342715a496926847d8edff51f9445ba878f615a78ff4694372e2ce5c1fe849184c183a209000000000000000032be93cbc929301f0dfcb39141ae5c94583d24be3b73e4d82bbe166cc9681115a342b8481248fd3df5ecf7a34db4b3ac8686d8b5e84fe3eded7d0244a4a332c4e2186ad0ae73cf3726bb5fe91756e3c9d479392542e83a2f678a426bf8828d8dcaf650c28e5b9af0119215800d9a7316e4972632155889e0af65f6cd0d402b936a6df8f749ca2608ea936e862025546e15b33b29d137032d8e18796f77ed86f39c46e1cbea9df0413d8551b94aae0acd640b9d2efb6a97e5e5f50500dbe5c3a51d5cc3d3938d697f9d8ecd631a62cb5a58ddc8d8cf669c212063bd70ce890ba4be44cff53ab262ef43f84ae6ff62f05a0bc3a57a88bdc3fd9f96de780b12a5ff1ffe4207c05f6ece60f6eaf9ed2cf034eb09fe2f9a99d69deafa5eaac14545a720fa70810782fc67de1ca168a0c5f6ef84c2252333b0cf6a4b3d45eabe361c09b4387d4caff18efe4d8353aa7819950f7b25d7cac939157c2d8609c2c4236bc2d94535febacc1c689d4addceefab3c56d74a29acec51171b22048a06cb8cbe4397a64f3392b8f9e905370969bbffd1dfef0250981e45f09aac7484890000006cc0ea799b8dea9953f8000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') 08:25:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000326bd7000fcd0df2501000000000000000080000000000000b0d873e040ac9e210342715a496926847d8edff51f9445ba878f615a78ff4694372e2ce5c1fe849184c183a209000000000000000032be93cbc929301f0dfcb39141ae5c94583d24be3b73e4d82bbe166cc9681115a342b8481248fd3df5ecf7a34db4b3ac8686d8b5e84fe3eded7d0244a4a332c4e2186ad0ae73cf3726bb5fe91756e3c9d479392542e83a2f678a426bf8828d8dcaf650c28e5b9af0119215800d9a7316e4972632155889e0af65f6cd0d402b936a6df8f749ca2608ea936e862025546e15b33b29d137032d8e18796f77ed86f39c46e1cbea9df0413d8551b94aae0acd640b9d2efb6a97e5e5f50500dbe5c3a51d5cc3d3938d697f9d8ecd631a62cb5a58ddc8d8cf669c212063bd70ce890ba4be44cff53ab262ef43f84ae6ff62f05a0bc3a57a88bdc3fd9f96de780b12a5ff1ffe4207c05f6ece60f6eaf9ed2cf034eb09fe2f9a99d69deafa5eaac14545a720fa70810782fc67de1ca168a0c5f6ef84c2252333b0cf6a4b3d45eabe361c09b4387d4caff18efe4d8353aa7819950f7b25d7cac939157c2d8609c2c4236bc2d94535febacc1c689d4addceefab3c56d74a29acec51171b22048a06cb8cbe4397a64f3392b8f9e905370969bbffd1dfef0250981e45f09aac7484890000006cc0ea799b8dea9953f8000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:33 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r11, 0x3) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x2) 08:25:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) 08:25:33 executing program 0: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:33 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000600)=""/192) r7 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file1\x00', 0x0) ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20402, 0x0) r9 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getegid() getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r13 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200c106b200695b0000009a91c28245b800000200e692c339000000000000000000000000000000ddff000000000000000000", @ANYRES32=0x0, @ANYBLOB="020063e83bb6b74f5bb59bf7db46411319b019091994d6b6fcc2500f03cf7977bd291fb1ca32e7dcafb8d16f79121cf717c9ed528b", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="3f00040b", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000000d988d57e9d642300018440ae2169932f6cf190ddd19f31a99355e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e879fcbb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0928098913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioprio_set$uid(0x2, 0x0, 0x9) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) 08:25:34 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:34 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) pipe(&(0x7f00000000c0)) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) fcntl$getflags(r10, 0x3) 08:25:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) sendfile(r7, r8, &(0x7f0000000040)=0xe8, 0x8000fffffffe) 08:25:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) sendfile(r7, r8, &(0x7f0000000040)=0xe8, 0x8000fffffffe) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r9, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000326bd7000fcd0df2501000000000000000080000000000000b0d873e040ac9e210342715a496926847d8edff51f9445ba878f615a78ff4694372e2ce5c1fe849184c183a209000000000000000032be93cbc929301f0dfcb39141ae5c94583d24be3b73e4d82bbe166cc9681115a342b8481248fd3df5ecf7a34db4b3ac8686d8b5e84fe3eded7d0244a4a332c4e2186ad0ae73cf3726bb5fe91756e3c9d479392542e83a2f678a426bf8828d8dcaf650c28e5b9af0119215800d9a7316e4972632155889e0af65f6cd0d402b936a6df8f749ca2608ea936e862025546e15b33b29d137032d8e18796f77ed86f39c46e1cbea9df0413d8551b94aae0acd640b9d2efb6a97e5e5f50500dbe5c3a51d5cc3d3938d697f9d8ecd631a62cb5a58ddc8d8cf669c212063bd70ce890ba4be44cff53ab262ef43f84ae6ff62f05a0bc3a57a88bdc3fd9f96de780b12a5ff1ffe4207c05f6ece60f6eaf9ed2cf034eb09fe2f9a99d69deafa5eaac14545a720fa70810782fc67de1ca168a0c5f6ef84c2252333b0cf6a4b3d45eabe361c09b4387d4caff18efe4d8353aa7819950f7b25d7cac939157c2d8609c2c4236bc2d94535febacc1c689d4addceefab3c56d74a29acec51171b22048a06cb8cbe4397a64f3392b8f9e905370969bbffd1dfef0250981e45f09aac7484890000006cc0ea799b8dea9953f8000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) 08:25:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000326bd7000fcd0df2501000000000000000080000000000000b0d873e040ac9e210342715a496926847d8edff51f9445ba878f615a78ff4694372e2ce5c1fe849184c183a209000000000000000032be93cbc929301f0dfcb39141ae5c94583d24be3b73e4d82bbe166cc9681115a342b8481248fd3df5ecf7a34db4b3ac8686d8b5e84fe3eded7d0244a4a332c4e2186ad0ae73cf3726bb5fe91756e3c9d479392542e83a2f678a426bf8828d8dcaf650c28e5b9af0119215800d9a7316e4972632155889e0af65f6cd0d402b936a6df8f749ca2608ea936e862025546e15b33b29d137032d8e18796f77ed86f39c46e1cbea9df0413d8551b94aae0acd640b9d2efb6a97e5e5f50500dbe5c3a51d5cc3d3938d697f9d8ecd631a62cb5a58ddc8d8cf669c212063bd70ce890ba4be44cff53ab262ef43f84ae6ff62f05a0bc3a57a88bdc3fd9f96de780b12a5ff1ffe4207c05f6ece60f6eaf9ed2cf034eb09fe2f9a99d69deafa5eaac14545a720fa70810782fc67de1ca168a0c5f6ef84c2252333b0cf6a4b3d45eabe361c09b4387d4caff18efe4d8353aa7819950f7b25d7cac939157c2d8609c2c4236bc2d94535febacc1c689d4addceefab3c56d74a29acec51171b22048a06cb8cbe4397a64f3392b8f9e905370969bbffd1dfef0250981e45f09aac7484890000006cc0ea799b8dea9953f8000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r9, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:34 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) pipe(&(0x7f00000000c0)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/status\x00', 0x0, 0x0) 08:25:34 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000600)=""/192) r7 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file1\x00', 0x0) ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20402, 0x0) r9 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getegid() getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r13 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200c106b200695b0000009a91c28245b800000200e692c339000000000000000000000000000000ddff000000000000000000", @ANYRES32=0x0, @ANYBLOB="020063e83bb6b74f5bb59bf7db46411319b019091994d6b6fcc2500f03cf7977bd291fb1ca32e7dcafb8d16f79121cf717c9ed528b", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="3f00040b", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000000d988d57e9d642300018440ae2169932f6cf190ddd19f31a99355e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e879fcbb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0928098913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioprio_set$uid(0x2, 0x0, 0x9) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) 08:25:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r8, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:34 executing program 0: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="000326bd7000fcd0df2501000000000000000080000000000000b0d873e040ac9e210342715a496926847d8edff51f9445ba878f615a78ff4694372e2ce5c1fe849184c183a209000000000000000032be93cbc929301f0dfcb39141ae5c94583d24be3b73e4d82bbe166cc9681115a342b8481248fd3df5ecf7a34db4b3ac8686d8b5e84fe3eded7d0244a4a332c4e2186ad0ae73cf3726bb5fe91756e3c9d479392542e83a2f678a426bf8828d8dcaf650c28e5b9af0119215800d9a7316e4972632155889e0af65f6cd0d402b936a6df8f749ca2608ea936e862025546e15b33b29d137032d8e18796f77ed86f39c46e1cbea9df0413d8551b94aae0acd640b9d2efb6a97e5e5f50500dbe5c3a51d5cc3d3938d697f9d8ecd631a62cb5a58ddc8d8cf669c212063bd70ce890ba4be44cff53ab262ef43f84ae6ff62f05a0bc3a57a88bdc3fd9f96de780b12a5ff1ffe4207c05f6ece60f6eaf9ed2cf034eb09fe2f9a99d69deafa5eaac14545a720fa70810782fc67de1ca168a0c5f6ef84c2252333b0cf6a4b3d45eabe361c09b4387d4caff18efe4d8353aa7819950f7b25d7cac939157c2d8609c2c4236bc2d94535febacc1c689d4addceefab3c56d74a29acec51171b22048a06cb8cbe4397a64f3392b8f9e905370969bbffd1dfef0250981e45f09aac7484890000006cc0ea799b8dea9953f8000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x0, 0x2) 08:25:34 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) pipe(&(0x7f00000000c0)) 08:25:35 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r8, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) 08:25:35 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) read(r7, &(0x7f0000000000)=""/250, 0x128b9372) close(r5) 08:25:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 08:25:35 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:35 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'gre0\x00', 0xa000}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x15acc76c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000600)=""/192) r7 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file1\x00', 0x0) ioprio_get$uid(0x3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20402, 0x0) r9 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getegid() getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r13 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="0200c106b200695b0000009a91c28245b800000200e692c339000000000000000000000000000000ddff000000000000000000", @ANYRES32=0x0, @ANYBLOB="020063e83bb6b74f5bb59bf7db46411319b019091994d6b6fcc2500f03cf7977bd291fb1ca32e7dcafb8d16f79121cf717c9ed528b", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="3f00040b", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000000d988d57e9d642300018440ae2169932f6cf190ddd19f31a99355e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e879fcbb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0928098913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioprio_set$uid(0x2, 0x0, 0x9) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) 08:25:35 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:35 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:35 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 08:25:35 executing program 0: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) pipe(&(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) 08:25:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f0000000400)='./bus\x00', 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 08:25:35 executing program 3: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0xc0c1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@dev, @initdev}, &(0x7f0000000380)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r2, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x20) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x126) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400000, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r6, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) close(r5) 08:25:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCS