c3, 0x4, 0x0, 0x55}}, 0x20) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0xe8}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000540)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad5357423b08db538753bcf550f05d219f8c6ca03228dd8d293261ba071190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e87414e615396eeb918828e", 0x67}, {&(0x7f00000003c0)="b1252522629f34a16eef84ce1b0063a44d2793e337dc2c6bb2d81b53e3fce25735962003d59c73b5c7e008a287d2a1d4", 0x30}, {&(0x7f0000000700)="c2e03ca050ae6e9864a1798b5cc6822a6179ef8da5cd850e45cd71cd4dfe222335695c1aa33ed46d46bd8b2e6cad6ddcf596", 0x32}], 0x3) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffcfb, &(0x7f0000000200)=[{&(0x7f0000000100)="8cb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f68cd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce373751008f2fe11265fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd035877eaf2c6b56cdebc12feefdd198891969cc07ec80aa290be65a7fa0866e97a784c0ac21edab15d06cfb51b0fa7e5f4404000000000000", 0xbc}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0x28c}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)='B', 0x1}], 0x1, 0x0, 0x362}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="6704848d55e654ad6f06f85d5c8caed968361a080c9a53252ca10c8e9f2257b4300eccf6f7e8f49e10382d24c8e304851ba9f674097b80c63dc396090a3762753a1400aba6fc2b7dcec89c4c03bb4f4a995e7f0d40", 0x15e}], 0x1}}], 0x3, 0x40000) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) chmod(0x0, 0x0) pipe(&(0x7f0000000100)) 18:51:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:29 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 198.972320] ip6_tunnel: - xmit: Local address not yet configured! [ 198.983613] ip6_tunnel: - xmit: Local address not yet configured! [ 198.995592] ip6_tunnel: - xmit: Local address not yet configured! 18:51:29 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:29 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, 0x0, &(0x7f0000d23000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000480), 0x12f8bd) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0xc867076f160aa902) arch_prctl$ARCH_GET_CPUID(0x1011) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/protocols\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r5, &(0x7f00000002c0)=0x202, 0xdd) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x86) fcntl$setstatus(r7, 0x4, 0x6100) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x4bd5, @loopback, 0x2}, 0x17f) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@mcast1, 0xb}) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a00060000050f0000000200000800005d14dfb51571a4", 0x39}], 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x42080}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="0019cd7a87adfb25f6f3a72b6a98c6878db23ec600000097a082406ace425b8d558c4fad8a7f2afc27ef8d298b6fc3e57045fc5c819d5d5926fcd68971223f3f0db462e189fb6eeb9ed239b07270bef91384c4821d3e1eff908ac87ff04d0e39466459a01ba6f44ed4e50900754444453b75efadaa0e04b4aea7dead45f80aea7b00b7662aa3acde0b88b277949067c1c4404803886d43a667e600"/168, @ANYRESHEX=r10, @ANYRES32=r7, @ANYRES32, @ANYRES64], 0x5}, 0x1, 0x0, 0x0, 0x8000}, 0x20048040) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000000)={@empty, @empty, r9}, 0xc) pipe(&(0x7f0000001300)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x10003, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) setfsuid(r13) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x4e22, 0x9, 0x4e22, 0xf83a, 0x1c, 0x80, 0x20, 0x29, r9, r13}, {0x7, 0x9, 0xffff, 0x8, 0xfffffffffffffffb, 0x7, 0xd5, 0x1}, {0xc000000, 0x6340, 0x7, 0xfffffffffffffffd}, 0x40, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in=@empty, 0x0, 0x3, 0x1, 0x1f, 0x1, 0x3f, 0x7}}, 0xe8) sendto(0xffffffffffffffff, &(0x7f00000000c0)="aed84cb0c45ba934d5ab6ec4eb323da0316171532c50ffdccbd0b606b543665599083c598b6197d0646a", 0x2a, 0x2000c804, &(0x7f0000000180)=@can={0x1d, r9}, 0x80) syz_open_dev$rtc(0x0, 0x20000, 0x80) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}, 0x5}], 0x1, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={@loopback, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x57, 0x10001, 0x0, 0x500, 0xfffffffffffffffb}) write$cgroup_int(r3, &(0x7f0000000140)=0x3, 0x12) 18:51:29 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000004540)) r11 = socket$inet6(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r12 = accept4(r11, &(0x7f0000000440)=@xdp, &(0x7f0000000500)=0x80, 0x800) accept4$packet(r12, 0x0, &(0x7f00000045c0), 0x100000) 18:51:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00'}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 199.365633] ip6_tunnel: - xmit: Local address not yet configured! 18:51:30 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 199.745628] ip6_tunnel: - xmit: Local address not yet configured! [ 199.989041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29541 sclass=netlink_route_socket pig=8488 comm=syz-executor.1 [ 200.092013] audit_printk_skb: 1926 callbacks suppressed 18:51:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\b\x80\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\xad\x00', @ifru_map={0x1ff}}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_settings={0x85, 0x0, @fr=0x0}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f00000000c0)=@raw=[@generic={0xdb, 0xf, 0x7, 0x2, 0x137}, @exit, @exit, @map={0x18, 0x5}], &(0x7f0000000240)='GPL\x00', 0x2, 0x9e, &(0x7f0000000300)=""/158, 0x40f00, 0x4, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x6, 0x7}, 0x10}, 0x70) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e75000/0x3000)=nil, &(0x7f0000e1c000/0x2000)=nil, &(0x7f0000fad000/0x3000)=nil, &(0x7f0000fe1000/0x4000)=nil, &(0x7f0000cf7000/0x3000)=nil, &(0x7f0000ded000/0x2000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000c3a000/0x4000)=nil, &(0x7f0000000140)="147d2af2f0634181f7a3db9f400de6066d66ebd40e9d512b6f3b35cd5b021fe4c569d7efb18dbab72511911c5a1d9f80516ce8a1fbad78346ce6c53b277ebcaedbd1c1e47165448f7051612ec277de96738538e21b8027a50d1b8d202c0a0d7c024b3a4f24af76b2f3c4b568d4985403ae65c1ff0d5f5d863f1bc57ad30e3fd7c5bf778b68871aedadd8ecb5491f62afda3804873ed4a140ca2b7e2bf858b9e0e370e0e2a7b0a57bfe6714269bdda1078fbcb001bb2c300120cac9592e16141c7352ed1c41148c95279f4da4664066a7a5ddb806dc362f01ce628be7829a", 0xde, r3}, 0x68) [ 200.092021] audit: type=1400 audit(1573843890.528:6226): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.111532] audit: type=1400 audit(1573843890.548:6228): avc: denied { dac_override } for pid=8478 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00'}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 200.113028] audit: type=1400 audit(1573843890.548:6227): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.115928] audit: type=1400 audit(1573843890.548:6229): avc: denied { dac_override } for pid=8477 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.127341] audit: type=1400 audit(1573843890.568:6230): avc: denied { net_admin } for pid=8477 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.128658] audit: type=1400 audit(1573843890.568:6231): avc: denied { net_admin } for pid=8477 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.168682] audit: type=1400 audit(1573843890.608:6232): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.170491] audit: type=1400 audit(1573843890.608:6233): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.194257] audit: type=1400 audit(1573843890.628:6234): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.206673] audit: type=1400 audit(1573843890.648:6235): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\b\x80\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\xad\x00', @ifru_map={0x1ff}}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_settings={0x85, 0x0, @fr=0x0}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f00000000c0)=@raw=[@generic={0xdb, 0xf, 0x7, 0x2, 0x137}, @exit, @exit, @map={0x18, 0x5}], &(0x7f0000000240)='GPL\x00', 0x2, 0x9e, &(0x7f0000000300)=""/158, 0x40f00, 0x4, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x6, 0x7}, 0x10}, 0x70) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e75000/0x3000)=nil, &(0x7f0000e1c000/0x2000)=nil, &(0x7f0000fad000/0x3000)=nil, &(0x7f0000fe1000/0x4000)=nil, &(0x7f0000cf7000/0x3000)=nil, &(0x7f0000ded000/0x2000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000c3a000/0x4000)=nil, &(0x7f0000000140)="147d2af2f0634181f7a3db9f400de6066d66ebd40e9d512b6f3b35cd5b021fe4c569d7efb18dbab72511911c5a1d9f80516ce8a1fbad78346ce6c53b277ebcaedbd1c1e47165448f7051612ec277de96738538e21b8027a50d1b8d202c0a0d7c024b3a4f24af76b2f3c4b568d4985403ae65c1ff0d5f5d863f1bc57ad30e3fd7c5bf778b68871aedadd8ecb5491f62afda3804873ed4a140ca2b7e2bf858b9e0e370e0e2a7b0a57bfe6714269bdda1078fbcb001bb2c300120cac9592e16141c7352ed1c41148c95279f4da4664066a7a5ddb806dc362f01ce628be7829a", 0xde, r3}, 0x68) [ 200.600863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29541 sclass=netlink_route_socket pig=8490 comm=syz-executor.1 [ 200.642417] …: renamed from eql 18:51:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x115, 0x8a8755cff478f13d, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000), 0x262) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r2, r3, 0x0, 0x88002) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl(r4, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x308) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r7, 0x0, 0x24, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ftruncate(r5, 0x10099b7) sendfile(r1, r5, 0x0, 0x88000fc000000) 18:51:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00'}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 201.532361] …: renamed from eql [ 201.535769] binder: 8520:8521 ioctl 3 0 returned -22 18:51:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:32 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00'}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:32 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000004540)) r11 = socket$inet6(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) accept4(r11, &(0x7f0000000440)=@xdp, &(0x7f0000000500)=0x80, 0x800) 18:51:32 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="803805df4a95510b67171fd6680adc4f49d1ef9858f59049d2f4d955275917e84d7254ef1987788525e302a5c0f58f43db64f2ae9e0cafb93cb21b9ee240a9db921b01"], 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=@known='system.advise\x00') memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x1) 18:51:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x1, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x67c, 0x428, 0x428, 0x0, 0x1c0, 0x318, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5, &(0x7f0000000140), {[{{@ipv6={@mcast1, @local, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xff], 'erspan0\x00', 'nr0\x00', {0xff}, {}, 0xc7, 0x1, 0x8, 0xc}, 0x0, 0x178, 0x1c0, 0x0, {}, [@common=@hl={0x24, 'hl\x00', 0x0, {0x2, 0x1}}, @common=@srh1={0x8c, 'srh\x00', 0x1, {0x1, 0x80, 0x80, 0x9, 0xb96, @dev={0xfe, 0x80, [], 0x13}, @loopback, @mcast2, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xff, 0xff000000], [0xffffffff], 0x82, 0x40}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x9, @ipv4=@multicast1, @ipv4=@local, @icmp_id=0x65, @port=0x4e21}}}, {{@uncond, 0x0, 0xec, 0x158, 0x0, {}, [@common=@eui64={0x24, 'eui64\x00'}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1000, 0x5, 0x3, 0x0, 0x0, "4769c14274425ff5c5ccacd5c7dbd71e98861f7970fc1a575338c14613ee8262f9745a0dd927013e821377ed4a075ddcf5e52d55f2611942d0214912232d480b"}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x587369592a5f26cd, @ipv6=@local, @ipv4=@loopback, @icmp_id=0x64, @gre_key=0x5}}}, {{@ipv6={@mcast2, @mcast1, [0xff, 0x0, 0xff, 0x2404391366aaad6e], [0xff000000, 0xffffffff, 0xff, 0xffffff00], 'veth1\x00', 'gretap0\x00', {}, {0xff}, 0x3b, 0x40, 0x2, 0x42}, 0x0, 0x140, 0x188, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x2, 0x1, 0x1, [0x8001, 0x2, 0x1f, 0x6, 0x400, 0x3, 0x1ff, 0x5, 0x4, 0x9, 0x5, 0x1, 0x315, 0x340, 0x2, 0x6], 0xb}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d5, 0x1, 0xfa, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x6, @ipv6=@rand_addr="4904faba1bddcd86aba1b467ba65ec6f", @ipv6=@remote, @icmp_id=0x64, @gre_key=0x8000}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x6d8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000004f40), 0x7fffffffffffe8d, 0x20008000) dup2(r0, r2) tkill(r1, 0x1000000000013) 18:51:32 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:33 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:33 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) pipe(&(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0c3c871f84000000d9c59b42"], 0xc}}], 0x1, 0x0) [ 203.025700] ip6_tunnel: - xmit: Local address not yet configured! 18:51:33 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="803805df4a95510b67171fd6680adc4f49d1ef9858f59049d2f4d955275917e84d7254ef1987788525e302a5c0f58f43db64f2ae9e0cafb93cb21b9ee240a9db921b01"], 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=@known='system.advise\x00') memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x1) 18:51:33 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:33 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, r2}) r3 = openat$cgroup_subtree(r0, &(0x7f0000001540)='cgroup.subtree_control\x00', 0x2, 0x0) ftruncate(r3, 0xffffff) 18:51:33 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:34 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000004540)) r11 = socket$inet6(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) 18:51:34 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 205.171280] audit_printk_skb: 2184 callbacks suppressed [ 205.171289] audit: type=1400 audit(1573843895.608:6964): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 205.203254] audit: type=1400 audit(1573843895.638:6965): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 205.231632] audit: type=1400 audit(1573843895.668:6966): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 205.260137] audit: type=1400 audit(1573843895.698:6967): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 205.289445] audit: type=1400 audit(1573843895.728:6968): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:35 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:35 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:35 executing program 3: futex(&(0x7f0000001a00), 0x800000000009, 0x4, 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0xe, 0xfffffffffffffd53) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) linkat(r0, &(0x7f0000000440)='./file0\x00', r1, &(0x7f00000006c0)='./file0/file0\x00', 0x0) fchdir(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x0, 0xffffffffffffffff}) lsetxattr(&(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="020500000a00000000000000000000000302000000e0000001000000000000000002000100000000000000000000000000f60000000000000002000000ac1e000100000000000000001a21e8a0a2f0855e80908367b7e75df3927bbe322956b2ca66ff9b"], 0x64}}, 0x0) pwrite64(r5, &(0x7f0000000540)="f77fbbffdafa8621cb55b94ae7721d5a4f0678f6fa1420da8e7ad264c30f9a0a3a6bf92f4cec1cf414a88729eea49c4fa468d18ef6d7f027764d2b9fef62d54fd943a96581edd87aa6b5bfc3729e4fac38442796fd112ad81e88027d76b278dd9d4113e9e3874fd7f908ebc8b4dd1f5220b630ef62b2cda92ae8e603176e6680878cf52514213932930d26164f3c6168505ab2f586e818ae9320bd828ea282e8920387", 0xa3, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) write$selinux_user(r4, &(0x7f00000000c0)={'system_u:object_r:initctl_t:s0', 0x20, 'staff_u\x00'}, 0x27) sched_rr_get_interval(0x0, 0x0) pipe(&(0x7f0000000500)) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) 18:51:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:35 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000004540)) r11 = socket$inet6(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) [ 205.320826] audit: type=1400 audit(1573843895.758:6969): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 205.350411] audit: type=1400 audit(1573843895.788:6970): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 205.367145] audit: type=1400 audit(1573843895.808:6971): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x2}, @rr={0x7, 0x3}]}}}], 0x18}}], 0x2, 0x0) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x13, &(0x7f0000000180)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(r2, r3, 0x2c, &(0x7f0000000040)={0x2b, 0x8, 0x401}) [ 205.408654] audit: type=1400 audit(1573843895.848:6972): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:36 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000408}, 0xc, &(0x7f0000000540)={&(0x7f0000007340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00042cbd7000fedbdf25020000006c0003000800088000000000080001000000000008010000020000001400020069703667300000000000000000e5000000080007004e23000008000500ffffffff1400020076657468315f746f5f626f6e64000000080008000800000008000500ac1414bb0000000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000086}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2b}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x16780000}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040088) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) pread64(r2, &(0x7f0000000340)=""/175, 0xaf, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001980)={&(0x7f0000001940)='./file0\x00'}, 0x10) dup2(r1, r5) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 18:51:36 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) getpid() creat(&(0x7f0000000300)='./bus\x00', 0x11) r2 = getpid() syz_genetlink_get_family_id$tipc(0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$netlink(r5, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc)=0x2, 0xfffffffffffffe91) sendto(0xffffffffffffffff, &(0x7f0000000280)="6df62a7d00bf04ae108d7eb8cf65e103b787bf267198b7dbe13ff78141992787265b12535313f8f2742d620d5d45d1accdfdac89fecbdc16ebaf529b46419ce1ed94b0b5ea21b13cbaf4b17eddc8f40818", 0x243, 0x0, 0x0, 0xffffffffffffffd0) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="ee77836931a2d12ef5c08b417701f3afc8e05f9ee09b77959d6856db61866641a4757def9fad29d33e92552cd309000000000000002fa0057070178713d6ecadc2d35a770cfaf2d8e840c3f7b744b131a70d03d1c16181b42028f6d93aa8a9478125b3724b888f6d221e1adbc3165954aa0ae885a54ef39bb375c02b943cd5fbe5cce1fb9f9aff3e095b9c80d7e350572a365475ff769b936d6c0af2f044d9d230e9b97807656ef7185edd1c8452ea9bd5454346bd17e6bf1b2fc3e608282287f183efb5193a5a3542bfac69b56f687728bf6b0711956c678b7fe2d47ae5d484e1f5c50ab65e"], 0x7) r7 = creat(&(0x7f0000001a40)='./file0\x00', 0x41) sendfile(r5, r7, &(0x7f0000000140), 0x8fff) setsockopt$inet_mreq(r4, 0x0, 0x33, &(0x7f0000000180)={@loopback, @local}, 0x708d7f4bac3a7fee) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'\x04\x00\x00\x00\x00\x00\x00\x002\x00\x10\x00', 0xd803}) r9 = dup3(r8, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000005c0)={'\x04\x00\x00\x00\x00\x00\x00\x002\x00\x10\x00', 0xd803}) dup3(r10, r11, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000840)={{{@in=@broadcast, @in=@dev}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xb4) 18:51:36 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000040)=""/158, 0x2c, 0x9e, 0x1}, 0x20) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getown(r1, 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x60000015}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000200)={'veth0_to_bridge\x00', 0xfffffeff}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000240)) syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0x2, 0x200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r6, &(0x7f0000000440)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/70, 0x46}], 0x1, &(0x7f0000000400)}, 0x40000020) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f00000004c0)=""/202, &(0x7f00000005c0)=0xca) readv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4) inotify_init1(0x80000) pipe(&(0x7f00000017c0)={0xffffffffffffffff}) mkdirat$cgroup(r8, &(0x7f0000001800)='syz0\x00', 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001880)={0x1, 0x28, &(0x7f0000001840)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={r9, 0x2, 0x8}, 0xc) inotify_add_watch(r7, &(0x7f0000001900)='./file0\x00', 0x34000400) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001980)='/dev/uinput\x00', 0x36da89fa83a15c7d, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000019c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000dff000/0x200000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f57000/0x4000)=nil, &(0x7f0000ec0000/0x2000)=nil, &(0x7f0000e86000/0x1000)=nil, &(0x7f0000001940)="b978195987e2bf8046e68f77d54b16b90587149b616795e4", 0x18, r10}, 0x68) r11 = open(&(0x7f0000001a40)='./file0\x00', 0x0, 0x40) ioctl$VT_GETMODE(r11, 0x5601, &(0x7f0000001a80)) write$selinux_access(r8, &(0x7f0000001ac0)={'system_u:object_r:systemd_unit_file_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x5ce2}, 0x63) r12 = syz_open_dev$loop(&(0x7f0000001b40)='/dev/loop#\x00', 0x5, 0x2000) ioctl$BLKROTATIONAL(r12, 0x127e, &(0x7f0000001b80)) 18:51:36 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 205.413987] audit: type=1400 audit(1573843895.848:6973): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xfd, 0x0, 0x1000}]}, 0xfffffffffffffcce) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r1, 0x8) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0xc867076f160aa902) arch_prctl$ARCH_GET_CPUID(0x1011) socket$inet6(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300ed0996a243fa88a60ce736e73fc029013ecc1bb0c30aec14b1eb9ffe19602eed867f0f5af1c8c69e8a8c598ee32b8ef9d2fbba462d7589a868b6a63cf00800cc10affb4bc019110242f3701dbc5f8f8d2ef8397c142e13cd2c7f449b0060cce9f3e0b63542", @ANYRES32=0x0, @ANYBLOB="140003006c6f00"/20], 0x5}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) fadvise64(r5, 0x3, 0x7fffffff, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r7, 0x80006) sendfile(r6, r7, 0x0, 0x8000fffffffe) 18:51:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffcc6, 0x10, &(0x7f0000000000), 0x10}, 0x70) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'team0\x00', {0x2, 0x4e20, @rand_addr=0x7fffffff}}) 18:51:37 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r7, r8) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x0, 0x174, 0x174, 0x0, 0x0, 0x294, 0x294, 0x294, 0x294, 0x294, 0x3, &(0x7f0000000040), {[{{@ip={@multicast2, @rand_addr=0x5, 0xff, 0xffffffff, 'sit0\x00', 'lapb0\x00', {0x7f}, {}, 0x5e, 0x1, 0x84}, 0x0, 0x114, 0x174, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0x2, 0x800, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x80000001, 0x2, 0x0, 0x1}}]}, @unspec=@CT1={0x60, 'CT\x00', 0x1, {0x10, 0x114, 0x3, 0x3, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x8}}, @inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x16}}]}, @unspec=@CT0={0x40, 'CT\x00', 0x0, {0x1, 0x7, 0x0, 0xde3, 'snmp\x00', 0x1}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x384) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000498000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000200001020100000000000000000002000000ce00e000000000000000fb000000000000"], 0x20}}, 0x0) 18:51:38 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000004540)) socket$inet6(0x10, 0x3, 0x0) 18:51:38 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r7, r8) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:38 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:38 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xcd, &(0x7f0000000000)="e870fdf591dca1b1047917bc8f575535dd84dd7e35d4dcb680ea543f7f8de633e3b04a9c06f579e7187429c8af360664799c003804fc3769f7", 0x39) sendmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffee3, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000018007f1dfd0000a2a4a280930a06000300000009910000000e0008000a0000000000dc1338d5782dbfef3fb6f6ac61f28f36f39584136ef75afb83de440000000000000000705810ea5a90662473e2baff", 0x55}], 0x1}, 0x0) 18:51:38 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r7, r8) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 208.510442] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.176216] audit_printk_skb: 1680 callbacks suppressed [ 210.176224] audit: type=1400 audit(1573843900.608:7534): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:40 executing program 3: fchdir(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) gettid() preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$nbd(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(&(0x7f00000000c0)='./file0\x00', 0x202b03, 0x82) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x0, 0x5, 0xff, 0xffffff5f}, {0x0, 0x4, 0xff, 0xf0}, {0x3, 0x4, 0x9, 0x4}]}, 0x8) 18:51:40 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040)=0x6, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x1d8) sendto$inet(r1, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x81, 0x4000801, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/\xaadK\xdb\xfd\xb0\xdaey\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xba) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)={'nat\x00'}, &(0x7f0000000180)=0x54) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000100), &(0x7f0000000380)=0x4) r5 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd1bcc8005f66e01f, &(0x7f0000006f80)=""/132, &(0x7f0000005740)=0xffffffffffffff13) lstat(&(0x7f00000003c0)='./file0\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getpeername$inet6(r5, &(0x7f0000000300), &(0x7f00000002c0)=0x183) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@multicast1}, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x203be9be0e639dd, 0x0, 0x0, 0xffffffffffffffd7) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x5, 0x0) read(r6, &(0x7f0000000880)=""/267, 0x4b6) 18:51:40 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r7, r8) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:40 executing program 0: syslog(0x0, &(0x7f0000000200)=""/147, 0x1e) read(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) fchdir(r2) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) socket(0x0, 0x3, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) r4 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 18:51:40 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, &(0x7f0000004540)) [ 210.208331] audit: type=1400 audit(1573843900.658:7535): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 210.243619] audit: type=1400 audit(1573843900.678:7536): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:40 executing program 1: linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400) pipe(0x0) creat(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(r1, &(0x7f0000000300), 0xffffff7e) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000140)={@remote}, &(0x7f0000000380)=0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) lstat(0x0, 0x0) r3 = socket$unix(0x1, 0x8667c2e6d08f7e4d, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000880)=0x101c4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\b', @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x20002895}, 0x0) quotactl(0xb7, 0x0, 0x0, &(0x7f0000000840)="39898e73bb5d5f9b") ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000000c0)=0xb5) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f00000003c0)={0x2de, &(0x7f0000000340)=[{0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x2, 0x5}]}) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) creat(&(0x7f0000000480)='./file0\x00', 0x80) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 18:51:40 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 210.283208] audit: type=1400 audit(1573843900.698:7537): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 210.301080] audit: type=1400 audit(1573843900.738:7538): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 210.312944] audit: type=1400 audit(1573843900.748:7540): avc: denied { net_admin } for pid=8717 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:41 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0xffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x6) write$P9_RGETATTR(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x210000, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RLCREATE(r6, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000bc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f00000004c0)={0x490, 0x0, 0x8e5f4e7c3d92a36b, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d2b639d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffc796}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc70}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x849aca2a}]}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @loopback, 0xffff0001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @loopback, 0x2851}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfd98}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11a}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x279}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xae2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8532}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcbd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0bc}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x490}}, 0x40) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d80)={0x1a4, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x52}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd931}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x566}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf65a}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3bc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1a4}}, 0x840) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="83030000", @ANYRES16=r5, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x721aedb76be775cb}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9251}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8bcd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3082c374}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20040010}, 0xc000040) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x8000169, 0x12003, 0x0) 18:51:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 210.314500] audit: type=1400 audit(1573843900.748:7539): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:41 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 210.319756] audit: type=1400 audit(1573843900.758:7541): avc: denied { net_admin } for pid=8717 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 210.321996] audit: type=1400 audit(1573843900.758:7542): avc: denied { net_admin } for pid=8717 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 210.323401] audit: type=1400 audit(1573843900.758:7543): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 211.105620] ip6_tunnel: - xmit: Local address not yet configured! 18:51:41 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:42 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:42 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:42 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)={'filter\x00'}, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002cc0)=0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0x5a) sendto$inet(r6, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1b4) setsockopt$sock_int(r6, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0xa4bcd6ca7f9c8017) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000003280)=0xfde8) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be946", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17966b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb8035f64e7afcd0baeccebca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000009,default_permissions,blksize=0x0000000000000400,blksize=0x0000000000']) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={0xffffffffffff32b2}, &(0x7f00000004c0), &(0x7f0000000700)={r10, r11+10000000}, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:51:42 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:42 executing program 1: linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400) pipe(0x0) creat(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(r1, &(0x7f0000000300), 0xffffff7e) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000140)={@remote}, &(0x7f0000000380)=0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) lstat(0x0, 0x0) r3 = socket$unix(0x1, 0x8667c2e6d08f7e4d, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000880)=0x101c4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\b', @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x20002895}, 0x0) quotactl(0xb7, 0x0, 0x0, &(0x7f0000000840)="39898e73bb5d5f9b") ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000000c0)=0xb5) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f00000003c0)={0x2de, &(0x7f0000000340)=[{0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x2, 0x5}]}) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) creat(&(0x7f0000000480)='./file0\x00', 0x80) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 18:51:42 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) 18:51:42 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:43 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000dc0)=ANY=[@ANYBLOB="803800104a95550b67d2f4d955275917e86d72eeef40b900801b114338200900000035000000d42c8fde381b494b2a61c5a4ceb32cc1de28ef11a16293cac2cb6a8404b134657806b177620d2fa9fae6801b7496fa4741657e6eb4cd5bef6dae8b32ffda55eca07f038d9ddc7c7fc489bf31b342d1c8e9704c098b46a7e5341f9fb7daf9524c20efff65e7f183d4977758a37b50c635b3b2f7744a81af60645170e8a65b00e823141463e91b716415289bbee5aee88e68eb25a06d14c8357c4f964494d3f24f77479a911f90663b0311341b1d6d6ffb8125149941d83f03bab321d6f7fe1b0575977f30fa0f898727b0a4812eb1a100874a19b988bae22ebf0e266dc05d6c6712b8d12be42ccaac9a56227b54e5c88b376f8627d63a7c"], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)={'filter\x00'}, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002cc0)=0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0x5a) sendto$inet(r6, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202e2f66696c65300aea205486396972100d97c042b2cd9252689db19239e8a5606e6635ddee806b5f917ba77a9d73c005f1d65ab06dcefc57551c9d41fbc241e44552829a60768e93d001671f3effb1f1ef2ae12e108339e01432fb49132d56cd027b2e1c17a9f416e5f982e0e6a5627c7c8622d30435d28ff9ac41074a89eb0a605441116a309995c5280c53b4ba8527106e7275ab7b1b7dfc2e916adc640c7a441cb0d319c93a8c46bf6b74171178be3dc9d4069c500000000000a6524126f1fdaf7dd82c4e83ecc7b60600f45e9602e1d2ea4470ece86713678f239e277019b632afc6e09aa720c7620b36940af961f0ccc0989b5d907ae86b75c3b9f26fcd4e9cdf9a941f3d3a1114b5cfa5432d36bbd84a3407c901385764a5697cbd02e5092ccf5a054450daf8a436f2ad8a00076381db30872f54d3d8be1c803cd3f0a3134ec8b4977cdb1f95e90d0294f2d9d53b70c425e0c0b175ffdb8a43ee659f31793971ee7b56b2141f1ea0da7f7bebc0a221234c5cf78bf9edae73082e8c2d16d443d7b0b515d7015bf19b844c202cb510ffff2158bc5e7a51432573c5d5842504bd6ac17200535a53ff3b2c8f6d88eca4"], 0x1b4) setsockopt$sock_int(r6, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0xa4bcd6ca7f9c8017) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000003280)=0xfde8) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be946", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17966b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb8035f64e7afcd0baeccebca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000009,default_permissions,blksize=0x0000000000000400,blksize=0x0000000000']) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={0xffffffffffff32b2}, &(0x7f00000004c0), &(0x7f0000000700)={r10, r11+10000000}, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:51:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:43 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) open(&(0x7f00000003c0)='./bus\x00', 0x12000, 0xb0) 18:51:44 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:44 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b700050000000000940000000600000038000000000000003871f2c4a1a9d63efda69500000000007f00"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x7fff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000800)=""/259, 0xfffffffffffffe88) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) readlinkat(r1, &(0x7f0000000500)='\x00', &(0x7f0000000600)=""/127, 0x7f) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="258000eb", @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) fchdir(r3) r5 = creat(&(0x7f0000000040)='./file2\x00', 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e40)) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) faccessat(r5, &(0x7f00000000c0)='./file2\x00', 0xff0f1c4c334adf50, 0x100) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) signalfd(r3, &(0x7f0000000380)={0x1f}, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0xfffe, 0xffffffff, 0x80000000, 0x8000001, 0x0, 0x2}, 0x1c) dup3(r6, r7, 0x0) fcntl$getownex(r5, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000740)=@buf={0x1000, &(0x7f0000000940)="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"}) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syncfs(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)) 18:51:44 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = dup2(r7, 0xffffffffffffffff) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:44 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:44 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000009c0)={0x8}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)={'filter\x00'}, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002a80)={'rose0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002cc0)=0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0x5a) sendto$inet(r6, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1b4) setsockopt$sock_int(r6, 0x1, 0x1000000000008, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0xa4bcd6ca7f9c8017) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@remote}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000003280)=0xfde8) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be946", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17966b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb8035f64e7afcd0baeccebca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000009,default_permissions,blksize=0x0000000000000400,blksize=0x0000000000']) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={0xffffffffffff32b2}, &(0x7f00000004c0), &(0x7f0000000700)={r10, r11+10000000}, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18:51:45 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = dup2(r7, 0xffffffffffffffff) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 215.188989] audit_printk_skb: 1992 callbacks suppressed [ 215.188996] audit: type=1400 audit(1573843905.628:8208): avc: denied { net_admin } for pid=2082 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:45 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 215.257778] audit: type=1400 audit(1573843905.698:8209): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:45 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000200)='./bus\x00', r7, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r8}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:45 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) 18:51:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 215.296121] audit: type=1400 audit(1573843905.738:8210): avc: denied { net_admin } for pid=2082 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000080)='vlan0\x00'}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) linkat(r0, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) fchdir(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dM\x00', 0x40000000008004, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r6, &(0x7f0000000a80)) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x62) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000fddfff)) syz_open_pts(r7, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r8, r5, &(0x7f0000000040), 0xfff) write(r1, &(0x7f00000000c0)="8aec592344b8776fcc12640aa7cd9a6107f8c1362aa042ade4d2f75310142645d5e57475f85fdd39978588cd373068", 0x2f) creat(&(0x7f0000000280)='./bus\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r9) [ 215.297985] audit: type=1400 audit(1573843905.738:8211): avc: denied { net_admin } for pid=2082 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 215.351259] audit: type=1400 audit(1573843905.788:8212): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 215.353043] audit: type=1400 audit(1573843905.788:8213): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 215.381102] audit: type=1400 audit(1573843905.818:8214): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 215.392835] audit: type=1400 audit(1573843905.828:8215): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 215.396308] audit: type=1400 audit(1573843905.838:8216): avc: denied { sys_admin } for pid=2080 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 215.398006] audit: type=1400 audit(1573843905.838:8217): avc: denied { sys_admin } for pid=2080 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:46 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = dup2(r7, 0xffffffffffffffff) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:47 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = dup2(r7, 0xffffffffffffffff) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:48 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r2, 0x1000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r4 = socket(0x10, 0x802, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r5, 0x2, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1}]) r6 = openat$cgroup_subtree(r3, &(0x7f0000001540)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r6, r2, 0x0, 0xfffffdef) pipe(&(0x7f00000005c0)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x88) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000440), 0x12fa0d) r9 = dup(r8) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0xa0) openat(r9, &(0x7f0000000340)='./file0\x00', 0x100, 0x10) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f00000003c0)={{0x10, 0x1, 0xb7d8}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00', 0x1000}) 18:51:48 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:48 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:48 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() [ 218.404179] input: syz0 as /devices/virtual/input/input15 18:51:49 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) getegid() sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000000)=""/46, 0x152) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000140)) ioprio_get$pid(0x2, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 18:51:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000002c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/65, 0x41}], 0x7}, 0x10063) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x11f) r6 = getpid() sendmsg$nl_route(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x283}}, 0x0) 18:51:49 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 219.090887] input: syz0 as /devices/virtual/input/input17 18:51:49 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:49 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x280, 0x0) syz_open_dev$loop(0x0, 0x0, 0x182) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x92) r2 = creat(0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_tcp_int(r1, 0x6, 0x25, &(0x7f00000001c0), 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x40000, 0x0) io_setup(0x10000000000f0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x800, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x20, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x240000a7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000002400010f0000", @ANYRES32=r4, @ANYBLOB="0000f2ffffffffff000000000800010068746200f9ff02000000050045d86e6da81722676e08797746c74a0b000000000800050000000000"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6]], 0x1) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000080)=0x800, 0xfffffffffffffd46) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x670828dd60e999ef) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="0000f2ffffff000000000000f9ff0200000005000000000008000500"/40], 0x2}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000080)={0x0, 0x53, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0xc, 0x2, 0x3}, 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000080)={0x0, 0x53, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0xc, 0x2, 0x3}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x53, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0xc, 0x2, 0x3}, 0x14}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000440)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="000000000080000000000000000000e236de2c89d609709803f3236692c7acbed7cd4f6097b2308a0b0b934721aeb929364062625f96d13f3d670682605e8a66c8a7435e058614ff49edccd3c4acdda68e6c19a29793fa34c61473c92b90e30b0e19268ccb8cf936e176a581390776823a2de785b0db6cd50c5b436c8aa2ddf253000ed11a906ffe2d8464395e5dc3b645410311502106033e132780ad4766e71c64cb6b654e98c74c22a2a0b961d626bc7df0cdd9a1033e9275249bc3df76c2"], 0xf}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0xc, 0x2, 0x3}, 0x51}}, 0x43) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[], @ANYPTR64=&(0x7f0000000cc0)=ANY=[@ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRESOCT=r12, @ANYRESOCT=0x0], @ANYBLOB="d9e9340b2f3b56e40a2ed6a1efcc1d51cb448470759163fe66f820bb4d1c5df9b1a05844967936fb217e8d7287d1845c2c56b79ab5283c3ee83a9552d644db6cc6d6eae15efb283e661a08e75015ddd188433f2549f0bf7205771748bd6987c56b9f112b76bd3eb9c2408e96e000ed661b402cd0e3944af29d5fcced75ebb9d76b4e393ac355e98234905c700b7d6fc4eb0eec37944d042f6f167518251244aad6671d17b11c173e83d4ef8d706594cbe08226cebd53f3fcdf7b20582fce795a48", @ANYRES32, @ANYPTR], @ANYRESHEX=r9, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESOCT], @ANYRES16=0x0], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r10, @ANYRES32=r3, @ANYRESHEX=r11], 0x81) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0xfffffef3) read(r13, &(0x7f0000000200)=""/250, 0x50c7e3e3) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r15, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0xe8}]}, 0x8) sendto$inet(r15, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r15, &(0x7f0000000440)=[{&(0x7f0000000540)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad5357423b08db538753bcf550f05d219f8c6ca03228dd8d293261ba071190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e87414e615396eeb918828e", 0x67}, {&(0x7f00000003c0)="b1252522629f34a16eef84ce1b0063a44d2793e337dc2c6bb2d81b53e3fce25735962003d59c73b5c7e008a287d2a1d4", 0x30}, {&(0x7f0000000700)="c2e03ca050ae6e9864a1798b5cc6822a6179ef8da5cd850e45cd71cd4dfe222335695c1aa33ed46d46bd8b2e6cad6ddcf596", 0x32}], 0x3) sendmmsg$inet(r15, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffcfb, &(0x7f0000000200)=[{&(0x7f0000000100)="8cb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f68cd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce373751008f2fe11265fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd035877eaf2c6b56cdebc12feefdd198891969cc07ec80aa290be65a7fa0866e97a784c0ac21edab15d06cfb51b0fa7e5f4404000000000000", 0xbc}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0x28c}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)='B', 0x1}], 0x1, 0x0, 0x362}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="6704848d55e654ad6f06f85d5c8caed968361a080c9a53252ca10c8e9f2257b4300eccf6f7e8f49e10382d24c8e304851ba9f674097b80c63dc396090a3762753a1400aba6fc2b7dcec89c4c03bb4f4a995e7f0d40", 0x15e}], 0x1}}], 0x3, 0x40000) setsockopt$sock_int(r15, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r15, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:51:50 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000080)=""/8, 0x8) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'L+'}, 0x28, 0xf456539bfc516b20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000580)=""/53) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) unlinkat(r5, 0x0, 0x0) llistxattr(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640)=""/90, 0x100a4) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = socket(0x2000000100000010, 0x2, 0x0) sendmmsg(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="edf4b192f1f1dab5ad6e9cbbf2dc7de5", 0x10}], 0x1}}, {{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x0, @remote, 'eql\x00'}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000380)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000440)={0x4, 0x3, 0x9163, 0x8, r8}) sched_rr_get_interval(0x0, &(0x7f0000000a80)) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, 0x0) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010005fba00000000000029c407000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00e207c3bb9b86e90148b400000000"], 0x28}}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='-\x00', r6}, 0x10) sendfile(r3, r10, &(0x7f0000000040)=0x9, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000740)) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) ftruncate(r6, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) 18:51:50 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:50 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 220.195811] audit_printk_skb: 1542 callbacks suppressed [ 220.195823] audit: type=1400 audit(1573843910.628:8732): avc: denied { net_admin } for pid=8965 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.206719] audit: type=1400 audit(1573843910.648:8733): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.208650] audit: type=1400 audit(1573843910.648:8734): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:51 executing program 3: pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) linkat(r0, &(0x7f00000004c0)='./file0\x00', r1, 0x0, 0x1400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000080)='./file0\x00', 0xa00) dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x400000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) lsetxattr(0x0, &(0x7f0000000c80)=ANY=[@ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRESDEC=r4, @ANYRES16, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES16]], 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000000c0)={0x8, 0x35, 0x5, 0x3}, 0x8) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000340), 0x4) sched_rr_get_interval(0x0, &(0x7f0000000500)) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r6, 0x0, 0xfffffffffffffffc) r7 = epoll_create(0x8) sendfile(r3, r7, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) ftruncate(r0, 0x6) creat(&(0x7f0000000280)='./bus\x00', 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000400)) fchdir(0xffffffffffffffff) [ 220.216194] audit: type=1400 audit(1573843910.658:8735): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.218091] audit: type=1400 audit(1573843910.658:8736): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:51 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:51 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') gettid() [ 220.219984] audit: type=1400 audit(1573843910.658:8737): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.224949] audit: type=1400 audit(1573843910.658:8738): avc: denied { dac_override } for pid=8953 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.237358] audit: type=1400 audit(1573843910.678:8739): avc: denied { create } for pid=8965 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 220.239188] audit: type=1400 audit(1573843910.678:8740): avc: denied { write } for pid=8965 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:51:51 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 220.240405] audit: type=1400 audit(1573843910.678:8741): avc: denied { net_admin } for pid=8965 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.978082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61937 sclass=netlink_route_socket pig=8991 comm=syz-executor.0 [ 221.087590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:52 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:52 executing program 3: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x0, "326769a68241fe2f154fc034087e2890e0268c3cff0bdf23e1d01216ee1817dcf2d3c36918cbd4a0e6fa4ee9a4af6432398c9ffbfc140fa1842c47e281677b5070cb2e917b1ec8524d1c2eb7caa168c772c0038fcf39db603da0ed271b5d9fa82819490738e3d950636aeb16c2b39ce74e89af0d8b5c410c8b358aeeccd6"}, 0x80) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c00060000001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0x278, 0x278, 0x0, 0x0, 0x278, 0x334, 0x334, 0x334, 0x334, 0x334, 0x4, &(0x7f0000000000), {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'veth0\x00', 'teql0\x00', {}, {}, 0x88, 0x2, 0x10}, 0x0, 0x10c, 0x168, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x0, 0x1, 0x2, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x3, 0x4, 0x2}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x0, 0x1, [0x36, 0x14, 0x13, 0x1, 0x19, 0x2d, 0x16, 0x5, 0x21, 0x1d, 0x29, 0x3f, 0x9, 0x20, 0x9, 0x7], 0x0, 0x10000, 0x5}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x5}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x100, 0x501, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xbb, 0x7}, {0x101, 0x3, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x8, 0x0, 0x2}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x424) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x3) 18:51:52 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 221.847490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:51:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00d473fc00000000", 0x12, 0x0, 0x0, 0xfffffffffffffe57) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) readahead(r1, 0x8, 0x4) recvmmsg(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 222.055108] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.142989] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.3'. 18:51:52 executing program 3: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0xa) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x180000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x9ab8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x8, 0x4, 0x4}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x700}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x1, &(0x7f0000000100)='\x00', r2}, 0x30) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000003c0)="d9f94d519084befd8d83a0c9eb7329270e0412a99a9fdd5d2038f5e45a2a120b1abc240d981e8644cd6bcd0ef682fefcf47aef8120a95777a22e23dafd11cfa6c531c96f7fa22f362e1e985387e936063add60e692eada520d8fb840edd493f5f8921fc0df20082a1d94591a6681249849968f30844f55e6276d19b32e0bfc37382aadd48662d599aefcafd151bbcd82452d4b96e92e4a88897ae8b3dbdde51dafab76178483fd17c0a7ec89ce66deb7645af5c5edda95b16580") r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r5, &(0x7f0000000540)=@known='com.apple.FinderInfo\x00', &(0x7f0000000580)=""/102, 0x66) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000600)={0x5}, 0x8, 0x80000) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000640)="9715214dcc0eed171a80b91230642c7c7cec9040fb79036fa4019958075b21ae9b17e73087d5dfb791983eee8cadf9935fe9f4039797a20739025a3d6b913445517743160a5ab18fc3edcb86f0ea4faccc3d0bd1be31fdf9181100d0e3b3a13903fedfe2e2bdb449e04b7175f3a046e96df46ee485f0de8cc419cb77794d0aa3c7e17200dbd87afa9a1150ec37bb99b2216cb49d534f1338f8f8f7105875f6a6f4136cabe95e53874d7daf7c1ea1e7df8822b425b99908e1e77d38b8fa9615d72ac066136f0c7c82daef4e251d43901ff9cab2b55457875c6368b459b7af9cdcba96024a100e34f24f8b06e9c3af6abd", 0xf0}, {&(0x7f0000000740)="f96b028861aa9bbbf0dbbdfa6231a6a368c70783fde39de2afdcab86ca3dbe0b22ecea452def17878c25992523103a4ca7f99159d2a81354ce1f53d557158976dfff1897d31b705bb6da6424bead742f5423c82555ec65d18a52ce402fda9bee524dec5be1c1e1ade67d2fd08268a0abe5eb74bafed50a078f60355814ad3b7e99bbdb0a05da640a6f03764010d5e01d96f28902872664f72997b143effef2f47d1b97fc8893b99894b9a289a7a8a46bb192ce3e9559a2506eb28799d1a406e312711b28c207efade5aa3d393a677258bb6096f9ef73d2588ac5894e55c4fe535c0c022b3c61fbf87942b29dab857aef4a", 0xf1}], 0x2, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xc0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x3, 0x5}, 0x0, 0x0, &(0x7f0000000980)={0x4, 0xd, 0x6, 0x6}, &(0x7f00000009c0)=0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=0x40}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={r1, 0x10, &(0x7f0000000b40)={&(0x7f0000000880)=""/96, 0x60, r7}}, 0x10) r8 = add_key(&(0x7f0000000bc0)='rxrpc_s\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r8, 0x1842, 0x800, r9) r10 = openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x400002, 0x140) ioctl$EVIOCGVERSION(r10, 0x80044501, &(0x7f0000000d00)=""/102) r11 = add_key$user(&(0x7f0000000d80)='user\x00', &(0x7f0000000dc0)={'syz', 0x0}, &(0x7f0000000e00)="4f55e5b3752ae290c7", 0x9, r8) r12 = add_key$keyring(&(0x7f0000000ec0)='keyring\x00', &(0x7f0000000f00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r11, &(0x7f0000000e40)='cifs.idmap\x00', &(0x7f0000000e80)={'syz', 0x0}, r12) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000f40)=[@window={0x3, 0x7ff, 0x9}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0xfff9, 0x1f}, @mss={0x2, 0x4}, @mss={0x2, 0x9}, @timestamp], 0x7) r13 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETA(r13, 0x5405, &(0x7f0000000f80)) unlink(&(0x7f0000000fc0)='./file0\x00') getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000001000)={@loopback, @empty}, &(0x7f0000001040)=0xc) r14 = syz_open_procfs(r3, &(0x7f0000001080)='net/ip_vs_stats_percpu\x00') fcntl$F_GET_RW_HINT(r14, 0x40b, &(0x7f00000010c0)) 18:51:52 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:52 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000001c0)=0x800a74, 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000440)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getpgid(0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000740)={0x1, 0x1, 0x1000, 0x9b, &(0x7f0000000580)="11eb6b8f4c77dd7237306d441893f8885e2ce1605e43920622fcc8857ed95750b073d6321ffcf9a1c9a8e12ceae40c9833732ba994981b304aa700ec261f466b5a559ba943e9015a401ce2b108999c0de3e3f379a4db58724f1b74e3e0d1c7a858d173f2ecf2e3ad18d34d7308a7faf85cb279ce8735998fe0c979f3d3151b56ff409bd48a22e67c059f114d8ea13fa01e35fbbb2f7f62ac33b258", 0x5c, 0x0, &(0x7f0000000640)="f4f96804ea5b1ed58161e70df54d41e267adc84e13277bb60315eac3dc1f303b3b5cd3c838213ca22d393672ec934b7e291c32191fcff77d538f9104219c04979c0cc0456842b1d12fea55f43413d6adeda2b0d5419f916e708be109"}) unshare(0x4040000000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000007c0)={0x9, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e21, @multicast2}}}, 0x104) signalfd(r4, &(0x7f0000000000)={0x8001}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1000000000000006}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f00000002c0)=0x400000000008000, 0x4) setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0, 0x0) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000380)="1c23c91ec0b6c1e455b8dba95a54095742c0f37996ebe736dc0db4904923d1afe2dfdd623052ea1c636ffc2e35023197fcc24e3cd9470b166371d6202928d757bf630aaa3975ca8f44994499e7acd9d29ce0240719938db022b75d18f98c2db0e577e2f22aef4d64ef2abb9ef211e50500049a89708d1d6de409fec8e82f146d31d4d8a25fab657cfad5b1355ca6f44d786f0740d22bd8f0df1873b7118b46b4734d6ec116b326b02f9072737f3b9036", 0xb0}, {&(0x7f00000004c0)="f3d5fcdfae1bd725263336cfa8ec49080e77fc03826f6286ec5a397cdfb24058551fcb19f67d155435081cbedaa6209aa3807763da863ac85e9bf010d0d6710a0d4218111cab0f5aca7429f6fca2fb2cbdf8c45587a6477e44ceef0f1c9749564d12ee58", 0x64}], 0x3, 0x2) 18:51:53 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:53 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:53 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x802, 0x0) ppoll(&(0x7f00000019c0)=[{}], 0x2000000000000048, &(0x7f0000000040)={0x77359400}, 0x0, 0xfffffffffffffff5) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0xa8002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@caif=@dbg, 0x80, &(0x7f0000001dc0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)=""/96, 0x60}}, {{&(0x7f0000005c40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005cc0)}}], 0x4, 0x40000000, 0x0) select(0x0, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x200, 0x528e}, &(0x7f0000001880)={0x80, 0x8, 0x7, 0x0, 0x3, 0x0, 0x2e}, &(0x7f00000018c0)={0x0, 0x0}) sendmsg(r0, &(0x7f0000007300)={&(0x7f0000005f00)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000b42}, 0x80, &(0x7f0000006000), 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="400000dccfc4bb00000000b5fb0bbdbb061874c97da636cfea2518683206af419bc0000000b700000071bbcd857134622875b21c305b1bcb9122af5b5ecdd8417f9910908dbc0dc9a69eec93ef3de38bd6138161a431549356eb34aee8a12345bdb74f8bb8f69099619f9c8e9c07000000697a686dd84d1ca4a2da293e6e19e86917c602fc874c6c5967aec64923ff68e2831cbf2b082cb419c6300f907fe646a1d2be830c6384eaaa10d8a87c810146759eaa476fba4789e397c19ac9f9330ed8bc7bba0759b67fea720636ee08f40e576929e6f1cec2da8b2191391c0f54e5ff2efff8d056ce6adbac280ac99457dc01c784f6326ba388"], 0x79}, 0x4000000) r5 = getpid() ptrace(0x10, r5) ptrace(0x11, r5) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000180)={&(0x7f0000000580)=""/198, 0xc6}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000408}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="55001d0f87e6ab9d39eb9c7066411abed3775ba6730b29623f36be48145d3d74adf655c6c930b9e65327b1256d122b8ce6edf085efbf6ec4aa22197c2a539700fcfffffb99", @ANYRES16=r6, @ANYRESOCT=r4], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = open(&(0x7f0000000340)='./bus\x00', 0x101000, 0x20) ftruncate(r7, 0x2007fff) socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='uid_map\x00') getsockopt$packet_int(r8, 0x107, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f0000000300)='./bus\x00', 0x2002, 0x1) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r7, 0x0, 0x8000fffffffe) 18:51:53 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:53 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') [ 223.295729] ip6_tunnel: - xmit: Local address not yet configured! [ 223.365628] ip6_tunnel: - xmit: Local address not yet configured! 18:51:54 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 223.509300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.517623] qtaguid: iface_stat: create6(lo): no inet dev 18:51:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:55 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:55 executing program 3: clock_gettime(0x0, &(0x7f0000000540)={0x0}) clock_settime(0x0, &(0x7f0000000580)={r0}) 18:51:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000000c0), 0xfec4) 18:51:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x2000000000801, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x8) sendto$inet6(r1, 0x0, 0xffffffffffffff8e, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 18:51:55 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="2c00000014000905000000000000000002000000", @ANYRES32=r0, @ANYBLOB="14000200ee80ffffffffffa64ae69e4000aa0000069641761853e5eca589b34c71f7dd956a45c2be2c29b102bd966c83bd31fc66c95bf2ab54acf3014d83872204025201d5284dc8217a2909f5e67884ff795d9eaad4ede5c308f66649527b25b58d5ee7d63655c429719532b673874da3eded7a1673e7f3792e33b096324b9765dbc5b94d7d3a2d1e2fdba06b01cc7022dcba0daa661ab2f9bebbd97ac9f105af386460d443796836"], 0x2c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0x3}}) 18:51:55 executing program 1: r0 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x50}]}, 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) [ 225.210698] audit_printk_skb: 2059 callbacks suppressed [ 225.210707] audit: type=1400 audit(1573843915.648:9429): avc: denied { net_admin } for pid=2081 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 225.214632] audit: type=1400 audit(1573843915.648:9430): avc: denied { dac_override } for pid=9096 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 225.229390] audit: type=1400 audit(1573843915.668:9431): avc: denied { dac_override } for pid=9096 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 225.234723] audit: type=1400 audit(1573843915.668:9432): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) [ 225.239179] audit: type=1400 audit(1573843915.678:9433): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 225.242284] audit: type=1400 audit(1573843915.678:9434): avc: denied { dac_override } for pid=9096 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:56 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) [ 225.255664] audit: type=1400 audit(1573843915.688:9435): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 225.290678] audit: type=1400 audit(1573843915.728:9436): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:56 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x100000039, &(0x7f0000000000)=[{&(0x7f0000000380)=""/110, 0xffffffd9}], 0x1, 0x0, 0x4a, 0x2300}, 0x2f04) close(r1) [ 225.296113] audit: type=1400 audit(1573843915.738:9437): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:56 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 225.303022] audit: type=1400 audit(1573843915.738:9438): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:51:56 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x16}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x4000, 0x111675fac65e1e39) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = epoll_create1(0x80000) fdatasync(r3) renameat(r0, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000100)='./file0\x00') r4 = open(0x0, 0x105a00, 0x1000000000000084) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) utimensat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={{r5, r6/1000+10000}, {0x77359400}}, 0x100) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r7, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000052c0)=0x0) ptrace$setregs(0xffffffffffffffff, r8, 0x5, &(0x7f0000005300)="58c2d3973a3b9324b6d00196f39a39a92c77941d68b1410be737e2fc609824ceb35ecb6d8c41515a3d694be5c00248da6a77a1f9ea8f5df21b1279330918a0d50a38f89af82203ead628fa") socket(0x11, 0x800000003, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = accept4(r4, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000240)=0x80, 0x80000) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000280)={{0x2, 0x4e20, @local}, {0x0, @broadcast}, 0x10, {0x2, 0x4e23, @loopback}, 'ip6gretap0\x00'}) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r10 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20388, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r10, 0x0, 0xffffffffffffffff, 0x0) 18:51:57 executing program 3: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendfile(r1, r1, 0x0, 0x200800100000002) 18:51:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e30, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}, 0x2203) 18:51:57 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 227.105625] ip6_tunnel: - xmit: Local address not yet configured! 18:51:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9d"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) 18:51:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x80, 0x12) 18:51:58 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 18:51:58 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:51:58 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:58 executing program 0: clone(0x3182001fd6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x1ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) 18:51:58 executing program 1: 18:51:58 executing program 3: 18:51:58 executing program 1: 18:51:58 executing program 3: 18:51:58 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:51:58 executing program 0: 18:51:58 executing program 1: 18:51:59 executing program 3: 18:52:00 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) gettid() 18:52:00 executing program 3: 18:52:00 executing program 1: 18:52:00 executing program 0: 18:52:00 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:00 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:00 executing program 0: 18:52:00 executing program 1: 18:52:00 executing program 3: 18:52:00 executing program 0: 18:52:00 executing program 3: 18:52:00 executing program 1: [ 230.216908] audit_printk_skb: 2564 callbacks suppressed [ 230.216916] audit: type=1400 audit(1573843920.658:10295): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.244192] audit: type=1400 audit(1573843920.678:10296): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.248152] audit: type=1400 audit(1573843920.688:10297): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.258686] audit: type=1400 audit(1573843920.698:10298): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.260264] audit: type=1400 audit(1573843920.698:10299): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.270121] audit: type=1400 audit(1573843920.708:10300): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.274981] audit: type=1400 audit(1573843920.708:10301): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.277353] audit: type=1400 audit(1573843920.718:10302): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.284015] audit: type=1400 audit(1573843920.718:10303): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 230.306100] audit: type=1400 audit(1573843920.748:10304): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:02 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r10, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) 18:52:02 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:02 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:02 executing program 3: 18:52:02 executing program 1: 18:52:02 executing program 0: 18:52:02 executing program 3: 18:52:02 executing program 0: 18:52:02 executing program 1: 18:52:02 executing program 0: 18:52:02 executing program 3: 18:52:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="214007a48367fbe4df6ff3cf9627d1662ce66bb5836ed3693ff77c7b198b36b5fabc08163d9aea5860bd9395f7eff9d959611df848bb8d7c3409c2d1deda40a0bcefd1dccc079113d0115d8971368c5c521b2115f4c49124b172df3bdc39947a8b873370ca51176912"], 0x2) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x1) execveat(r1, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x1000) 18:52:03 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) r9 = gettid() syz_open_procfs(r9, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') 18:52:03 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:03 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:03 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46800) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x9032, 0xffffffffffffffff, 0x0) 18:52:03 executing program 3: perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) 18:52:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x26e, 0x0) setitimer(0x6, &(0x7f0000000280)={{0x77359400}, {0x0, 0x7530}}, &(0x7f00000002c0)) 18:52:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 18:52:04 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 233.937779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:04 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 234.112831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:52:04 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:05 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 235.239331] audit_printk_skb: 1941 callbacks suppressed [ 235.239340] audit: type=1400 audit(1573843925.678:10952): avc: denied { net_admin } for pid=2082 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.289999] audit: type=1400 audit(1573843925.708:10953): avc: denied { net_admin } for pid=9317 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.335251] audit: type=1400 audit(1573843925.768:10954): avc: denied { net_admin } for pid=9317 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.345963] audit: type=1400 audit(1573843925.778:10955): avc: denied { net_admin } for pid=9317 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.359556] audit: type=1400 audit(1573843925.798:10956): avc: denied { dac_override } for pid=9306 comm="syz-executor.0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.443198] audit: type=1400 audit(1573843925.878:10957): avc: denied { read } for pid=9302 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 235.489620] audit: type=1400 audit(1573843925.928:10958): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.491957] audit: type=1400 audit(1573843925.928:10959): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.531411] audit: type=1400 audit(1573843925.968:10960): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 235.548224] audit: type=1400 audit(1573843925.988:10961): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:06 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:06 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:06 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:06 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) gettid() 18:52:06 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:06 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:07 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:07 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)={'team0\x00\x00\x00\x00\x00\x00#\x00'}) 18:52:07 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:08 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:08 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:08 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:08 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:09 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:09 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:09 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f00000001c0)=0x800a74, 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000440)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getpgid(0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000740)={0x1, 0x1, 0x1000, 0x9b, &(0x7f0000000580)="11eb6b8f4c77dd7237306d441893f8885e2ce1605e43920622fcc8857ed95750b073d6321ffcf9a1c9a8e12ceae40c9833732ba994981b304aa700ec261f466b5a559ba943e9015a401ce2b108999c0de3e3f379a4db58724f1b74e3e0d1c7a858d173f2ecf2e3ad18d34d7308a7faf85cb279ce8735998fe0c979f3d3151b56ff409bd48a22e67c059f114d8ea13fa01e35fbbb2f7f62ac33b258", 0x5c, 0x0, &(0x7f0000000640)="f4f96804ea5b1ed58161e70df54d41e267adc84e13277bb60315eac3dc1f303b3b5cd3c838213ca22d393672ec934b7e291c32191fcff77d538f9104219c04979c0cc0456842b1d12fea55f43413d6adeda2b0d5419f916e708be109"}) unshare(0x4040000000) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000007c0)={0x9, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e21, @multicast2}}}, 0x104) signalfd(r4, &(0x7f0000000000)={0x8001}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1000000000000006}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f00000002c0)=0x400000000008000, 0x4) setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0, 0x0) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000380)="1c23c91ec0b6c1e455b8dba95a54095742c0f37996ebe736dc0db4904923d1afe2dfdd623052ea1c636ffc2e35023197fcc24e3cd9470b166371d6202928d757bf630aaa3975ca8f44994499e7acd9d29ce0240719938db022b75d18f98c2db0e577e2f22aef4d64ef2abb9ef211e50500049a89708d1d6de409fec8e82f146d31d4d8a25fab657cfad5b1355ca6f44d786f0740d22bd8f0df1873b7118b46b4734d6ec116b326b02f9072737f3b9036", 0xb0}, {&(0x7f00000004c0)="f3d5fcdfae1bd725263336cfa8ec49080e77fc03826f6286ec5a397cdfb24058551fcb19f67d155435081cbedaa6209aa3807763da863ac85e9bf010d0d6710a0d4218111cab0f5aca7429f6fca2fb2cbdf8c45587a6477e44ceef0f1c9749564d12ee58", 0x64}], 0x3, 0x2) 18:52:09 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:09 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:10 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) getsockname(r4, &(0x7f0000003b00)=@xdp, &(0x7f00000004c0)=0x80) [ 240.247900] audit_printk_skb: 1365 callbacks suppressed [ 240.247909] audit: type=1400 audit(1573843930.688:11417): avc: denied { dac_override } for pid=9408 comm="syz-executor.0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.368205] audit: type=1400 audit(1573843930.808:11418): avc: denied { dac_override } for pid=9408 comm="syz-executor.0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:10 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:10 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 240.386477] audit: type=1400 audit(1573843930.808:11419): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x802, 0x0) ppoll(&(0x7f00000019c0)=[{}], 0x2000000000000048, &(0x7f0000000040)={0x77359400}, 0x0, 0xfffffffffffffff5) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0xa8002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@caif=@dbg, 0x80, &(0x7f0000001dc0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)=""/96, 0x60}}, {{&(0x7f0000005c40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005cc0)}}], 0x4, 0x40000000, 0x0) select(0x0, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x200, 0x528e}, &(0x7f0000001880)={0x80, 0x8, 0x7, 0x0, 0x3, 0x0, 0x2e}, &(0x7f00000018c0)={0x0, 0x0}) sendmsg(r0, &(0x7f0000007300)={&(0x7f0000005f00)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000b42}, 0x80, &(0x7f0000006000), 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="400000dccfc4bb00000000b5fb0bbdbb061874c97da636cfea2518683206af419bc0000000b700000071bbcd857134622875b21c305b1bcb9122af5b5ecdd8417f9910908dbc0dc9a69eec93ef3de38bd6138161a431549356eb34aee8a12345bdb74f8bb8f69099619f9c8e9c07000000697a686dd84d1ca4a2da293e6e19e86917c602fc874c6c5967aec64923ff68e2831cbf2b082cb419c6300f907fe646a1d2be830c6384eaaa10d8a87c810146759eaa476fba4789e397c19ac9f9330ed8bc7bba0759b67fea720636ee08f40e576929e6f1cec2da8b2191391c0f54e5ff2efff8d056ce6adbac280ac99457dc01c784f6326ba388"], 0x79}, 0x4000000) r5 = getpid() ptrace(0x10, r5) ptrace(0x11, r5) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000180)={&(0x7f0000000580)=""/198, 0xc6}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000408}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="55001d0f87e6ab9d39eb9c7066411abed3775ba6730b29623f36be48145d3d74adf655c6c930b9e65327b1256d122b8ce6edf085efbf6ec4aa22197c2a539700fcfffffb99", @ANYRES16=r6, @ANYRESOCT=r4], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = open(&(0x7f0000000340)='./bus\x00', 0x101000, 0x20) ftruncate(r7, 0x2007fff) socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='uid_map\x00') getsockopt$packet_int(r8, 0x107, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f0000000300)='./bus\x00', 0x2002, 0x1) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r7, 0x0, 0x8000fffffffe) [ 240.485043] audit: type=1400 audit(1573843930.918:11420): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.497019] audit: type=1400 audit(1573843930.938:11421): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.498369] audit: type=1400 audit(1573843930.938:11422): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.503455] audit: type=1400 audit(1573843930.938:11423): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.522963] audit: type=1400 audit(1573843930.958:11424): avc: denied { sys_admin } for pid=2080 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.524342] audit: type=1400 audit(1573843930.958:11425): avc: denied { sys_admin } for pid=2080 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 240.538178] audit: type=1400 audit(1573843930.978:11426): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:11 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 241.097925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.097970] qtaguid: iface_stat: create6(lo): no inet dev 18:52:11 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:12 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:12 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:12 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:12 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000002e0007041dfffd946fa2830020200a0009000000001d8568ff0f000000000000", 0x24}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00<\xa3\x04;\xe6\xa5\a\xbc\x96\x03g\x8dd\xe6\x87\xad\x9e!\'H\xe3\x95h>d2>\xc6\x02\xee\xfb\x88\xac\x9f\x02\xee\xcdZ\x1e\xae\xfd\xdd]\xa2Uk\xaf\'\x90\xd0K\x0e\xcf\x8b\x94', 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLCREATE(r3, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40047705, &(0x7f00000002c0)={0x4, 0x7fff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000440)=""/183) write$cgroup_pid(r2, &(0x7f0000000280), 0x12) rmdir(&(0x7f0000000000)='./file0\x00') 18:52:13 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) 18:52:13 executing program 0: getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x81, 0x1f, 0x0, 0x9}, {0x8, 0x28, 0x3, 0x6}]}, 0x8) read(r2, &(0x7f00000001c0)=""/56, 0x38) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x400000, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x2) ptrace(0x4207, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) write$selinux_attr(r6, &(0x7f00000002c0)='system_u:object_r:agp_device_t:s0\x00', 0x22) wait4(r1, 0x0, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000040)='u', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000700)={'filter\x00', 0x1000, "866c8e3d37374140c6027906ca65c9c7bd0c3ccf4e89c9991f50d1846984b800d093c562202fb2e516209471ef1a380a2809a9065b1c6d49df3be48527ca10ba56f21dea1fb8e5d49171a53a91afaf9cd589aaa10e36bc75e5452f5436f2153a427dff54e6fffabd4d22f8ef4d8387275633ea47c62a32afeb7d4d24ba1995129de7000fbb94b40af01538c61bdffd2c2e51ae495b964263e68d5f2a2737a0eabec6e915692d5c186afe8a28638d08d85b99df4deacb7320d41ef54695b7f751d68d520c17f66337f145dd97bbaf13a093695bdec31a1979863797cba6eae510ef7e0869a0d6d64215cbd1a8b99f1f45895aa4b6a240ebb449957e98b8ba134ad4ce75b900ab63b0262a743e52f0eec4084667bec72a91d6ade48dddaa809255d737db4eeebbfddb6b4cd7a19143d0e71374879c89c07e22a870f8d240d26aa7c25fdd39659f693d7ffec60f9c4d74572552a0b7bc8ab8256fe688c906388232bf6e8721c28974b357fa6ade4d682b0e403c291c4d75c935fc37929065e9db0664d1ec5abe9e989eadde2a99196d46166749dd31de64716f72ed034888dc7fa2139ca6afeed4aa520bf3f90eacf83ec402f77396dcf91037ecdc65e79607eab83a782c0e7d6637c09a7a8119ac16ebcecc0fa8e2b2699a9ec9837b7b4666f684275d3c3c76a5625870bd5d4a6072fc20617f60ca980400cb078e9fa1e5be0068cc9bfed06ab73fd32be91c121cf383661da136c98833a9e4772917241b1a8523731c41aa7b70fee3f139e77284050ec87d55e2866622274f78d8cfdeb9d48bf46caf7d0bd409f3a2d1a1a8f60c861d30201d49c82004f2e21682a7c4fb186cfbc3b490d7eefecb7e28e8ec522fd000403efb3dd6aa8b239304297fd3630568fca1069f494b005bdf5591a982ab9ef303100ed747772be778d99163516429279c088533fce9c33902e1172794f83778542cbd3db5e6aa4990983b482f01c2328042024c5995d7b65e59e5cbb36a1e2e40eb25c0f238b016233ee89f3c32412889b6cc1f647666748bb30149975a439324d6d6a698d3b90949e6d0e88481005cbae64b95caf8f51c6aca91b7032eed975b02abe8e89bddd713f12030b1c914445af470ae4dbfec6b9a2955c0d3d32fba188ccefb04c595e9851b88058d5c6916fe4686bf835c3c653c1a4980887ed91a144e11651f4cc0be3d37503961b11fd1f1fe95d6497484b4180d8bc1f9b4e9dc74422b72570280d47963b5c596d3c125d8771a4a2b92a8668fdfdbca101734ec7c7129a32809c92203504e63e9541545b663ed483de7e0696777a0a1ff9fd9814defa93cf087a1e8a8e869e02ecd7b6a38c2b3deff3f5a5ea08a021a95972dd073bd6b1e99cf5f0cb396ec75319c45259312d87f7e90d14ec3016882b8aa785890d294fdfdc9e7d6e678b74ad273dae5a6c07d86956c7d0b143cdfde957cbfc55eb25ae172c4082c09472f784e0b18a5d1d32eba664fd39e728e7339dcc8b5e3116a9d5260b75a8a351ea5d00739c9b4e276c90b72aa28ee5a4378d26500598a777da75057885c076ccbbaeb66477e42e6b04ce1cfd78b93e926546256543485ef93355e5f7d1d682c4124afdd13390c4f9183d6eec70164c5b24a274a9ce289a32e5aa0b04eb9f7df67aeba84e4a228592bee347732fc6cf3a5f9456f70724565d4acb66842dac27fea1e649c180bd544017f802bee531f1091d5bc10fecebba934ff8a898b62ed63ca09d67d9bff29727a5cb5699a2a3f62453f6e20cf904835a2e920f6a9784a285564bae6e2d21560150690e7c102eab7fd9f4c4309ec2e1263fd326c40b60ea350850fe057af400761feb377497b6786ee12e2e36d395991f79420f31665f6dd5a2db06b1ef03e99de8901c8c72be53e36683c2b4bccee8ab81c61de2bb371d42a2cfd54665c1371c21372494da5c7d2fe83bd1953dfda449199357dadae9f840a57052c6a998e795f41831e4be9b8918202f8830cce52991e8d879c83b1867f4db8d884b3b2e0d02aeddefdedb3f61128e837385efeb7776b900e8137f039a343de5af68e416444faabf62aecf7f3cf0aab171986f480177074d683abc3cc82c5576c90d124a633c37e2b1c31f2f1cd3e9419edb2877c9a9b1d85be33bc2e8fb1a929c3361547ab23ea2707d712dfc1c8f76459c0631f040952f61888aaabd321decd19be7424f1c542fd71c79f5798a66a1aa60d2823fd73809883d6562efd7264447f2892cd6b697612b1c46529f745dce55ae47681102edb87cbb09e115df5813ab0053172af073eb2ce5c37c8aeb409c179132bbbc6cba48536517aae0e0177d1c932f9b1ad724bff84504c202df84333cde14daaf817b1a13b78d61ed636520a324dc1b0c96229ff31c4710bcaf8201ed8dd3e2a5e777a45675af520c2cc144e7fb7a0e568c44d60e50ccbda60f7a635af2b1430f779590b7348552435f4ba882b529344119a46629e8410897fcdeda108725bc8d48e632f79d528d1597cf919fe90dbe1a788cf95b7bb9fb0d388f61899357c7a1b58d9526ae29992c9df2d937c6595a721838a7de56ba8ba3ca8deeecbe77a1d58f04fcb88d4b50221a27de8b5a6369a9e5a28e932ad15b9743de184141071c86f55896dbc290e8e7f5c00c3c72df9d79617bec348cd9b560ffc41c4449c3443d6ad3aabf2846adb1833c3e9182954331cc47f1bceb1b9009d21e45a3f038c8aa841933f16ea47297a5aa8af52be20e78882197a69675d14553f737e55ff3c4b69e5c3082be5364636f6f5748435f1afec72e9c3920d21c71e458a2da25f91e57601f9ca0d94ac50e4b8fdd39f48ba8e8f38fd77575c00e6a638ed3e95f9a52c639e22e2e64f0b8fd737a67155bb532bf2c26d611d2ccb3afa41b33277fd48524c389750cda8f543f3b2e3eca7db99c075c64e033f61d5699c75f6461a71e5ac17955a0e29a9372b8094156ebff08eaee0d71c6cfc7ac68241b6bc6b9a3d22d035bbdfe71deedba56a1d66a5bb29571ceb5a7d9144cf09cf5776c05a832b4cfde1e80ed74bf2786e77edca5b83b8c0250818aaac7291dc0382834d6af6414c51a79c5c02f225e0b67301666482d1d0f8f31f5444047b143e6f57400393c83f31156409e42b0778ba09d67923838672eb53a798916562ade4fa3fb76e88b0f0b77b91f720150cbc30c9951753609b103f57c2007e1b5ab4d94828eccbb4ecf3b3a540da38f02d7bd71df9421f8b56aa6e8e8d9e54a7575bd587f7567f4f93e5b2a36d07d4bb124c8d060e9033e918e2b01799987c5d9883553a9ae79218bc0b903aced1c24c94850b5e57fd2199adb6f7475ef8f8923932b7f86d361ee11ab8633c44069541254c1ffe3acfbafb751eca59055196a2bc9eae2d603600da37a37375c5ade773de61d2af840a3cbf19d26e816b66f343f4adb51755db9643fdd5191658e433802794fda5ff6c03102cdbeaabd0868eb008de54f354867a74f499404d7d8c116e130a939b6f1a08308d9fd648d42752b1c65d88b74b9abdbfb7c948988d528a16d03ec617bd29d098dce40d7cfbadc6d1ce0c5952adf05656ec26b981eb02166862832f34f1d83e89d5d47c35bebb439f4d41d0169077971fc8a213545196c939dd9d91cc7c6cdab44143d2248d3199e2dcda6bd3903c32927afd59b11064a6100ae8680d386d86dbd24a9ac93746291f4c7b2c434c95931b3fd919956941de489ec909ee9fdf8bd93446aa25aaa523c20d604761b26c47b844c86a02f0561e3f98ff9261104ddedb74f71939c3c9ec494948fe48a5ca24aea5c6ea03db7a909c7a1f2d4a2cc39b86d1abb6f032c4e0ae46a9d5b4626a074033fd10a68bb7a47d8cad49715afa41a3cc11859bcb0ed0e077e2610a5bca9d337d8a80be56ab73442a34d47581a61d7680ddd261433ac41cf2d3c04a65271f12e42e8baad8fe9febb185805ab812732727e41ad8d53006927ca1f38775f46c06c906e9e03fa3e64a18084ba690b4fb1d91b3f5bbece3fb2ce7c198d184ebf58aa5f9be631bad47a59e0da301eae49ccea3b9551cb28f7f00c5e33190f9032273ce85f0dba37036569a249925856c21eac5ad67a633bde835a3735101441e2f1ebee7e9182c7f60360f9b6755f1e6555f9bf4df049b6db3b7c2ed3a2c48a3669ae60532e70b861581cf54a65545c764d1649c0d49fbd40ccacf31179b804aa5b63e35e8fbf7c80606fa65a710841d667c5ffd5616f8225a601c3adaaaa85ad478473f864a48b381ae414a92e6149889b606eb0cec254aee67f2df4b2a5117e91b4b99f32a4576baecb1f079bfb668384cedcfda5b3167aea7ca0679d5e0328767c168329764e69e199d103c62a17e24f9a69f4ebd089154aca7a0bf96414e74b3e7da4c830e77f9cc6aadd855fa5583d16eb275ba10e27e16b2f75f51f1413a89f55c3a401ec9f7e184f5182268388df7474abbaf97e61083976b3b2a9d1d8be98cd902b93cfdf7c5d33540ce6d1fd37061900b7649c6613d107b6ff8922478d05cf4a6f068417ebe9f2afb739ace7e38e581cf6a2d34a561fdfb98f3ebd9e2a3ab7d31778ad91daa93d820b77b0b24dafce95a92a11b8b146741c75a7ccbd5aa45ca00476c1661f260ae9cebf88635497060794a1335fccbf6409237b039462f7df1eee866b5e669861f2978eeec9dbbc7028926ef2624009586a4dc2abda96b49fe766513d5e53a541377d3cf22d653784603fda535c715fcfe1b972c3fb2a183275ea4697cd67ee17c16403c5fc4f490b93b8fbdd394eca02af83e7d1a676800fa5d4eb8afce2f9b325218636469616d0f351070245c7482777c8e16d53e57fd312bfa527d31288be211ccde983b1c9d8294ef9d3829de876b06c4b962aa786920f42723906bff4bb47c59dc2ef21c8ab2115880e84244a1d1bbf576bc424cbed65d72da648b408696211d5f0cc3a75113236535720fc11ee5da65d5aa29e2c1e601871102519aafce97b840d22a709f25ce9bb520ce24e09adbe48e5e211b4fa24785d028b6cb209d96d8fe150baacb8a3beabd737fb69b9ebba9c393a3dcf0affe81eef62d1f663d9628f9913a0969a0146e876e3601752fbd202ea49b1d93fe914bb127e3095f8ee4302fb6f6b98c901483ee58e3c85e2da76758267b108d84e4810678bf45dc1aeaaea6b6675438da568eb6675798361507334aeacb2acaa0a799f70e3ef985bfd91e0d3bcee5f64bee348ba72ad9c94b79531a524b22f7e905a2679604938c60c101193d34192bdfda0409a1a61ef7ab056d9b17b8e779c4f22f2177c9c639baf3242d04b389977985f459eae822abc2c0be3beaf6508153cc60632c38e2f65fb34784a91b8b73cc5c4b4e734062161ec629dcb9a38765451637dd33de6e4fdc0e75b30d97069d1e0c75b9758ab3c7b89181b1e0b8b627fd01c5c4da1e138fbc5537b5e76da0c64b429f9c790a94612d9713f3ce3c80d369e88085e96196b0111ab5a663ed0c7d0c48a481adf3da49f1c5956975e573ab7b787b39d5c26ae888a59553f5e1421217aad4a72b7854cc80f6156c5021b053ae4069649ba2abacade9d655203e4471cd9e4ccebe243af7a056065dbfdc520c55ef58b062260b56df8bb6b3de46dcdc3279c375fb82a4be849e3f1b81a53513892e93b4d8d1425049c369d1047926f7aed563547dec4c3db64909f96c5bb0bbc374d8728b137305bd8e9e57760794d216426a988c0abf4efd236daa2f2285ac67f480dbb9728b179278a358cfd52d3a769d96"}, &(0x7f0000000240)=0x1024) r8 = dup3(0xffffffffffffffff, r7, 0x0) write$FUSE_GETXATTR(r8, &(0x7f0000000100)={0x18, 0x8000000000000025, 0x7, {0x9}}, 0x18) 18:52:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000009c0)="44f04c97cfc7e5998f920eba1ce576133998d39f2641959b6f55a3d18aeb0656088ca075000000000000000000000061b86c30c8e19e013a19a1240c3772c2749905a47433eb972c1eca9bd115ed111f43196a3b1bc35a3675a95b6b41e3b3386003d359d9f29e9b703ec55345ad91aa8c3701000000d0f46f9aac8d6c4e102390d76e397ad8dfaad8c0a2970e453521f1729111200580ed433bd4fb276df0bb9c400ed9a1d38a197750832d3b10484ae96620b1f6214bc043", 0x7c000000) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') linkat(r5, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000580)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r6, 0x400454d1, &(0x7f0000000080)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r6, @ANYRES16, @ANYBLOB="ae11c0073580af7f519d8bbaf06ea2c2517516145d461fb1c46490a807580d45a66e069fcad7951cfdab77852ad4030005450a8c4f93ca1522e0803e5b8b9787a8f44803acfdffffff791ab42cec93dd9d5be2821d9830d84e35930bc81f44e529dd1ecda221ee5667ab381c405cde15fe305628398f2a7f12f740fb8ebb8c7849c57636aa94f8c3b89d8e7f915f8765290b5c23873d155523b4dcb3cf78f0bdf08194cc086738a700e42937f0fa083aef87145b84966b7e3636bf6dc1931961b98a8794afb2c4a5739a53ad270a792de1b67d386fbbc90030d546c82759940807dcb194e228d669bd", @ANYRESOCT=0x0]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="10002cbd7000fcdbdf25150000004400090808000200005b000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e00000800020004000000fa49060008000100090000ffc2ac1490be9197dbaea162d1689dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385e39b1ef31da0128e4838eef8fcc739684ce0b93a18bdaf5ebccbdf66b256a27731ff2e7c7c84a4e1957c04750f31ae24b671ce79d59f21960f9184aa8f23e2a06d9f4138b87300000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r9, 0x4, 0x6100) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r9, &(0x7f0000000200)='threaded\x00', 0x175d900f) creat(&(0x7f0000000180)='./bus\x00', 0x0) 18:52:13 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4fff}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'eql\x00'}) dup3(r0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) 18:52:13 executing program 1: setitimer(0x3, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000080)) mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000440)="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", 0xffffffffffffff4f}, {&(0x7f00000001c0)="b0b68aea4cccd4bce89a8063d6d9a2aa606933257aabf9118daa148b88afbfc31e82b246b46954a0018696a186420867b1b7c739a1aacf144dd49770b775bbe478ed3224467930a7148868852125cc719e663fc638bc98708ad820b0ed517760410ae9f108dc4c1380d5fcc47cad32ec25621db56e07a596641d81a6370d2a5f656a98a2fb60e5c9e485"}, {&(0x7f0000000380)="4b8893fb42bf22b54be0f9f28e0c88752668fd30fb5cfdf0216d6a81aec04d50b75dc02f22d9f8fc543efd17415ac453b413fa011fa3d1c462b19b589ab3ec514de6f27bd67120b5f08d86ff084338428736ce47884e66fc7867f1539c76c54282d1f73f723f280c2c9e0d767a1b43f06b5d1cad8711b406b10d4c4713dce1c34a917f9ff9136876", 0xfffffffffffffee6}, {&(0x7f0000000100)="1d6af41aff3db8", 0x34f}], 0x20000000000001cc, 0x0) 18:52:14 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:14 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x2, 0xff38) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x2200000}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x61, &(0x7f00000000c0)={'ip6_^\x9eU\xb2\x00\x00,\xd5\xff\xf3\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) pipe(&(0x7f0000000540)={0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) write(r3, &(0x7f0000000580)="b4f16dd8dbddeb0e2a6b31ab67c21e52d1f34712b35710a32fc9cf3183f51ed74259babe14006f78773d06bba556ac3dffc4778a43bf826186be222c56cc702b4937d77be70246716008ca3c86668c1a5aab1537000000000000000000ac9bc448bfe7000000000000009df2788fb508cfc72958fb64232792f5bec7d4435d2265da2d0ecfaf375443d2cdb37189d2904c60373a3bab8c460551e258de1ed7ff4ad7aa64695c70c161b249f3fecd", 0xae) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') read(r5, &(0x7f0000000680)=""/261, 0x4fd) rt_sigpending(&(0x7f0000000180), 0x8) fchdir(r2) r6 = creat(&(0x7f0000000640)='./file0\x00', 0xc0) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000080)={'\x00\x80\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r7, 0x0) keyctl$invalidate(0x15, r7) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0xfffffdc9}, 0x1bb49bd1) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40046602, &(0x7f0000000480)=0x1) fchdir(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0xd, 0x4, 0xffffffff, 0x2}) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ashmem\x00', 0x442402, 0x0) sendfile(r0, r9, &(0x7f00000000c0), 0x81) clone(0xc0000000, 0x0, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x6800000, 0x4010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) 18:52:14 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) bind(r4, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r4, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x0, &(0x7f0000000180)) r6 = dup(r5) r7 = socket(0x10, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') sendfile(r7, r8, 0x0, 0x80000008000000b) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x74) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x234) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000640)=0x1) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) getsockname(r5, &(0x7f00000001c0)=@rc, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000380)=0x83, 0xffffffffffffff8a) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x74) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r11, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6e61740000000000000000000000000000400000000000000000000000000000050000000000000000000000000000000000000000100000000000005684e8000000000000005183456b644718d894bd4461bff79a00"/123], 0x74) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000240), &(0x7f00000004c0)=0x10522) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r12 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x2007fff) sendfile(r6, r12, 0x0, 0x8000fffffffe) 18:52:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) io_destroy(r2) 18:52:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x17f) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000040)={0x49, 0x29, 0x1, {0x1ff, [{{0x20, 0x1, 0x6}, 0xffffffffffffff80, 0x20, 0x7, './file0'}, {{0x28, 0x2, 0x4}, 0x0, 0x4, 0x7, './file0'}]}}, 0x49) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4040004) creat(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e24, @broadcast}}) request_key(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r4, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@local, @mcast1, @ipv4={[], [], @multicast1}, 0x0, 0x5}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'brid{e`s\x00\r\x00'}) [ 244.622634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket pig=9527 comm=syz-executor.3 18:52:15 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 18:52:15 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:15 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 245.257146] audit_printk_skb: 1902 callbacks suppressed [ 245.257154] audit: type=1400 audit(1573843935.698:12061): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.265465] audit: type=1400 audit(1573843935.698:12062): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:15 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 245.270023] audit: type=1400 audit(1573843935.708:12063): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.272692] audit: type=1400 audit(1573843935.708:12064): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.282013] audit: type=1400 audit(1573843935.718:12065): avc: denied { net_raw } for pid=9513 comm="syz-executor.3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.284881] audit: type=1400 audit(1573843935.718:12066): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.293181] audit: type=1400 audit(1573843935.728:12067): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.297415] audit: type=1400 audit(1573843935.738:12068): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.304615] audit: type=1400 audit(1573843935.738:12069): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.313276] audit: type=1400 audit(1573843935.748:12071): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 245.318746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket pig=9540 comm=syz-executor.3 18:52:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x17f) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000040)={0x49, 0x29, 0x1, {0x1ff, [{{0x20, 0x1, 0x6}, 0xffffffffffffff80, 0x20, 0x7, './file0'}, {{0x28, 0x2, 0x4}, 0x0, 0x4, 0x7, './file0'}]}}, 0x49) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4040004) creat(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e24, @broadcast}}) request_key(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r4, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@local, @mcast1, @ipv4={[], [], @multicast1}, 0x0, 0x5}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'brid{e`s\x00\r\x00'}) 18:52:16 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(0xffffffffffffffff, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(0xffffffffffffffff, r4, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) io_destroy(r2) 18:52:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x4}}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lookup_dcookie(0x4, &(0x7f0000000540)=""/4096, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r3, &(0x7f00000004c0)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @gre}}, 0x66) dup2(r1, r3) close(r0) 18:52:16 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 246.543804] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 246.550911] qtaguid: iface_stat: create6(lo): no inet dev 18:52:17 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x17f) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000040)={0x49, 0x29, 0x1, {0x1ff, [{{0x20, 0x1, 0x6}, 0xffffffffffffff80, 0x20, 0x7, './file0'}, {{0x28, 0x2, 0x4}, 0x0, 0x4, 0x7, './file0'}]}}, 0x49) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4040004) creat(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e24, @broadcast}}) request_key(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r4, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@local, @mcast1, @ipv4={[], [], @multicast1}, 0x0, 0x5}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'brid{e`s\x00\r\x00'}) [ 246.998785] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 247.005130] qtaguid: iface_stat: create6(lo): no inet dev 18:52:17 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) 18:52:17 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:17 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) io_destroy(r2) 18:52:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x17f) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000040)={0x49, 0x29, 0x1, {0x1ff, [{{0x20, 0x1, 0x6}, 0xffffffffffffff80, 0x20, 0x7, './file0'}, {{0x28, 0x2, 0x4}, 0x0, 0x4, 0x7, './file0'}]}}, 0x49) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4040004) creat(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e24, @broadcast}}) request_key(0x0, &(0x7f0000000540)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) r4 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r4, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@local, @mcast1, @ipv4={[], [], @multicast1}, 0x0, 0x5}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'brid{e`s\x00\r\x00'}) 18:52:18 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:18 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:18 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) 18:52:19 executing program 3: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000002b80)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000002cc0)) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 18:52:19 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) io_destroy(r2) 18:52:19 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:19 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:20 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:20 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) linkat(r0, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) fchdir(0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xc) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4a23, @multicast2}}) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000340), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80585414, &(0x7f0000000480)=""/102) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000580)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) lseek(r3, 0x20000010000, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000040)=0xffffffff, 0xfffffff7) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000500)={0x0, 0x1, 0xa66ad78f4f1ebdeb, r1}) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000080)=0x54) creat(&(0x7f0000000280)='./bus\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RLCREATE(r8, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x14d) fchdir(0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r10 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x40) setsockopt$inet_udp_int(r10, 0x11, 0x1, &(0x7f00000000c0)=0x20, 0x4) 18:52:20 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) 18:52:20 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 250.265930] audit_printk_skb: 2100 callbacks suppressed 18:52:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600610000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000020000000000005000600000a00000a00000000000000fe8000000000000000000000000000ff000004000000000081fdaf92034995e2c0c6e73e7facf04aaf9bd93772449c352906703bff4e27e4dc7640d3c873a72b1886e0825c77e44cd574fe4311b1725b29de560f8ab5b6bf79abf4a2630a70e7534eb9c57412c7aee3002f7a4fc31c6a4868f9cf77519779e7859b98dfb968a4fff6d67c6afa2e00089933a423c3e8f4b6c6c06475e1c71e3c6a6d58dd0413b6c947d197f0d4d3912d11422f04670fb1d38220c959cb0942e7d94901b0e74bfd26bef068d455c3019a6ca29d9ee56459ec3742d95770974f981bae6b36781332df211a6c274eac1494ba241c9b4637edf86729764d8875c75a3cbef5ba2f8481a661a897e4695164210b10e529ea30c140b7ef7227ba25a03d6194d6afb69844cde594129ad687db45df1594c094fac2bca3bc28a5d123f82333075f6343829e7d82628f514ad5efb8be10a4cf7303bc3eaabc5ebe0469b5938f4c037a3b5b6b"], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000900), 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0214000b80006a240c00000000000001"], 0x8}}, 0x24044001) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002000000000000e500000000"], 0x10}}, 0x0) dup3(r1, r0, 0x0) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) lseek(r3, 0x80000001, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) 18:52:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 250.265938] audit: type=1400 audit(1573843940.698:12770): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 250.327932] audit: type=1400 audit(1573843940.768:12772): avc: denied { dac_override } for pid=9665 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 250.370940] audit: type=1400 audit(1573843940.808:12773): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:21 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x8000, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000500)=""/209, 0xa78f}) r4 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) setpgid(r4, r5) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r6 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fstat(r2, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r8 = socket(0x10, 0x4, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mkdirat(r9, 0x0, 0x10) r10 = openat(r9, &(0x7f0000000080)='./file0\x00', 0x80002, 0xa) r11 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x4bd5, @loopback, 0x2}, 0x17f) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r12, r12, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r13}) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000002d00000425ad7000ffdbdf2500000000888fbfe134a1a44e5ac61786bb54b899a7ea4bf6974842c5a5bae3b4bb5e243c455e938d8d94a9608efa4340a791d2d89ccfcf27f913f0d4a47147acb2c0d826ddb984132a7920f3418c8288d99e91805ba6078b109761fb4e615364e5ffcfd9ffc821682a4c9604371549ea60297ef599e8610220b0ac419eaeba3730a0fc875c7c641ec6d8918e8067131eb878aba2bc895242ed", @ANYRES32=r13, @ANYBLOB="0e0001000e00f1ff9876e6ff080005003f01000008000b0007000000"], 0x34}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', r13}) r15 = getpgid(0x0) syz_open_procfs(r15, &(0x7f0000000140)='net/tcp\x00') r16 = syz_open_procfs(r15, &(0x7f00000006c0)='comm\x00') r17 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getdents64(r17, &(0x7f0000000780)=""/142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x40f00, 0x1, [], r14, 0x10, r16, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0xfa49, 0x7ff}, 0x10}, 0x70) fcntl$setstatus(r6, 0x4, 0x6100) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x20041, 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="803805df4a95550b244ed59b73b0929f13b50f2bb4073724ab31c438090000edff0000003a000000d4fc90"], 0x0, 0x0, 0x0) r18 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r19, &(0x7f0000000a80)) lseek(r6, 0x20000010000, 0x0) sendfile(r6, r18, 0x0, 0xfffffffffffffffc) sendfile(r6, r18, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) [ 250.385292] audit: type=1400 audit(1573843940.818:12774): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 250.387065] audit: type=1400 audit(1573843940.828:12775): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:21 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 250.388962] audit: type=1400 audit(1573843940.828:12776): avc: denied { read } for pid=9665 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 250.392252] audit: type=1400 audit(1573843940.828:12777): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 250.425047] audit: type=1400 audit(1573843940.858:12778): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 250.435609] audit: type=1400 audit(1573843940.868:12779): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:21 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000900), 0x4) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0214000b80006a240c00000000000001"], 0x8}}, 0x24044001) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002000000000000e500000000"], 0x10}}, 0x0) dup3(r1, r0, 0x0) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) lseek(r3, 0x80000001, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) [ 250.438868] audit: type=1400 audit(1573843940.878:12780): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r4, &(0x7f0000000700)=""/250, 0x48f2dc8a) 18:52:22 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socketpair$unix(0x1, 0xc5978ab5d92f3718, 0x0, 0x0) socketpair$unix(0x1, 0x73d802f2fff73e37, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 18:52:22 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:23 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) 18:52:23 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:23 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x14) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) write$nbd(0xffffffffffffffff, &(0x7f0000002b40)=ANY=[@ANYBLOB="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"], 0x1) sched_rr_get_interval(r6, &(0x7f0000000a80)) lseek(r3, 0x20000010000, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) ioctl$FIGETBSZ(r1, 0x2, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x40901, 0x0) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f0000000340)='^', 0x1}], 0x1, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0x15) creat(&(0x7f0000000280)='./bus\x00', 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x30, 0x0, 0xe20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x124, r8, 0x504, 0x70bd28, 0x25dfdbff, {}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pcy\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x400}, 0x20000451) 18:52:23 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = socket$inet6(0xa, 0x7, 0xfffffffffffffffe) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000100), 0xcb) r4 = socket(0x11, 0x800000003, 0x81) bind(r4, &(0x7f0000000100)=@generic={0x3, "00007cd900000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e123836005404b0e0301a4ce875f2e3ff5f163ee3efbf4dba00800000000000000101013c5811369e15775027ecce66fd791c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x4) fchdir(r2) creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) socket(0x11, 0x3, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x8001, @initdev, 0x6}, {0xa, 0x4e23, 0x400000, @mcast2, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x4, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x5c) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r8 = open(&(0x7f0000000240)='./bus\x00', 0x8000, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000000000fa0000003000000002030000000800c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df00a4d10021000800000200"], 0x80}}, 0x0) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) lseek(r9, 0x0, 0x4) sendfile(r6, r8, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 18:52:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) pipe(&(0x7f0000000380)) 18:52:24 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="2000000010002d7e30f41cab8ed07ba5000800000040000000de92c27c"], 0x20}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0x48f2dc8a) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001280)="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") ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f00000001c0)=0x40) madvise(&(0x7f0000003000/0xc000)=nil, 0xc000, 0xc) arch_prctl$ARCH_SET_GS(0x1001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() fcntl$setown(r2, 0x8, r3) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x800004, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8004700b, &(0x7f0000000000)) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000}) sendmsg$sock(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000040)='+l', 0x2}, {&(0x7f0000000080)="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", 0xfc0}, {&(0x7f00000011c0)="df1bba6154236e20487527da930ee739113c42ba861a8ee3aab0f377d8da465d7a55aafb84c002f84be95cad892b3ac2c5aa0fdf74b3585f9a9df196b64983002ca244621f334c35ce09032ea5119807eb913c9791701377d539cc78d2e23c3cccaf0347afd8420d283518ced37ef306ab6c07452f56b88276cc8a93274255", 0x7f}, {&(0x7f0000001100)="720ff074ec213c5507", 0x9}, {&(0x7f0000001140)="8e353e6745d8fc4b3e7c102b04aeb31729e00404aa8e27d3b25f3b3688d089ee255ccc252fdc6ea2", 0x28}, {&(0x7f0000001180)="0e32a172b2edd95a17360755ef2c2315", 0x10}, {0x0}, {&(0x7f00000021c0)="9137caa26a91b08f80c9e2439aa1cde5086d3f7217d0bb759e37b067f9197e19", 0x20}], 0x8, &(0x7f0000002240)=[@txtime={{0x14, 0x1, 0x3d, 0x7f}}, @txtime={{0x14, 0x1, 0x3d, 0x414}}], 0x28}, 0x4080) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet(0x2, 0x0, 0xff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 18:52:24 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:24 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000002c0)=""/105) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) umount2(0x0, 0x0) ftruncate(r6, 0x2007fff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000700)=""/250, 0x48f2dc8a) sendfile(r2, r6, 0x0, 0x8000fffffffe) 18:52:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @empty}}) 18:52:25 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) [ 254.934178] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 254.958178] qtaguid: iface_stat: create6(lo): no inet dev 18:52:25 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 255.300254] audit_printk_skb: 2384 callbacks suppressed [ 255.300262] audit: type=1400 audit(1573843945.738:13576): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.321911] audit: type=1400 audit(1573843945.748:13577): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.335068] audit: type=1400 audit(1573843945.748:13578): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.354228] audit: type=1400 audit(1573843945.788:13579): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.364356] audit: type=1400 audit(1573843945.788:13580): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.367700] audit: type=1400 audit(1573843945.788:13581): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.371459] audit: type=1400 audit(1573843945.788:13582): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.374905] audit: type=1400 audit(1573843945.818:13583): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.378885] audit: type=1400 audit(1573843945.818:13584): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 255.382087] audit: type=1400 audit(1573843945.818:13585): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) socket$inet_tcp(0x2, 0x1, 0x0) 18:52:26 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:26 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="2000000010002d7e30f41cab8ed07ba5000800000040000000de92c27c"], 0x20}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0x48f2dc8a) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001280)="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") ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f00000001c0)=0x40) madvise(&(0x7f0000003000/0xc000)=nil, 0xc000, 0xc) arch_prctl$ARCH_SET_GS(0x1001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() fcntl$setown(r2, 0x8, r3) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x800004, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8004700b, &(0x7f0000000000)) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r6+30000000}) sendmsg$sock(r5, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000040)='+l', 0x2}, {&(0x7f0000000080)="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", 0xfc0}, {&(0x7f00000011c0)="df1bba6154236e20487527da930ee739113c42ba861a8ee3aab0f377d8da465d7a55aafb84c002f84be95cad892b3ac2c5aa0fdf74b3585f9a9df196b64983002ca244621f334c35ce09032ea5119807eb913c9791701377d539cc78d2e23c3cccaf0347afd8420d283518ced37ef306ab6c07452f56b88276cc8a93274255", 0x7f}, {&(0x7f0000001100)="720ff074ec213c5507", 0x9}, {&(0x7f0000001140)="8e353e6745d8fc4b3e7c102b04aeb31729e00404aa8e27d3b25f3b3688d089ee255ccc252fdc6ea2", 0x28}, {&(0x7f0000001180)="0e32a172b2edd95a17360755ef2c2315", 0x10}, {0x0}, {&(0x7f00000021c0)="9137caa26a91b08f80c9e2439aa1cde5086d3f7217d0bb759e37b067f9197e19", 0x20}], 0x8, &(0x7f0000002240)=[@txtime={{0x14, 0x1, 0x3d, 0x7f}}, @txtime={{0x14, 0x1, 0x3d, 0x414}}], 0x28}, 0x4080) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet(0x2, 0x0, 0xff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 18:52:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000840)="8be6c7d5b0db478e2e617c187b848d90a14898d89028ffff00000000000057b0c97a4f0e79424826a068b6b322e6bad416f8540d659634753928189b62ddc007ad8392c02f640e758b4303c37e97ba5519ad9b99f7b47268ecb22ca7d4d3dcd3aea189ed5385886b7cc2d89d695987128c1290e531ed4da63b8b430e1bd402efface42c3332f7bd45e68228644092b7bc5d0b7492c6e93a139cf393ca94703050b3f04c8f43e33917fa950e249217fcea8187bce678d0d28f22e8a86bd8e3ebe9a6fce6d5775ff17f1ad2e6b073b00000000001e9c850db3934d46297195b04db76bbd1144c8fdb58ff4fd8922ffb408e54b68824d5ec90e45d8381cac44b0d43efd22b560c8f2ee3b755e379bfbbc1100e475290e3e3dca15b70d6b9a020d50644aa4825724ccc9", 0x128) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) geteuid() r4 = creat(&(0x7f0000000740)='./file0\x00', 0x4000000000000001) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r1) prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffffe) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffffffffffff8f) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="c6617dd5ec4ac4fa77168b26d0afc1f5", 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000380)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000ff00000080000000634840f5bf77de83fcd64e0a8910355c4f603ed60d023071a508129c7d982316a159b2efe75b9e1282595b09ac59136111de9b8688a821bacf9538ce5a4fde8bcced241de1713763b9d5d023b0995d7f8bb243f9f9b515f192eb50d3654c6249aa31d160f0e4a8ae3f7084dd5e99e7eadbc4c4e81676fb5e2b0e0d5b1e51b7d26d5fe7085d41e15e9e9394c75a68a11360d0572370f3adae635350aef208ce16443fbe4f"], 0xb0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)}, {&(0x7f0000000980)="cb5a943f31e4f6aa3dca5a5c3351cdeef75efa04f563fb12594c669951e2bfd5c4b877f5337803af6bd0140be56879a61966e40c4f9b2b9fe8b564a8e4f1f5e10a52fe3ac350ec7695ec684ab6031e082b7499c1dae850ca028f7ac26068d66224513e824ecbb23312b906d9fbbe852731680c0991fa2130fb80fb105faef7be28b5c13f791d6e8b6d13e0ccd1a3f2932e68978a04f4151666200240a8119bcac1411b8674305799ced1d0356f88f1eddaaafc6b0c09731bac0a7e", 0xbb}], 0x2, &(0x7f0000000a40)=[{0xe8, 0x115, 0x4, "245bcbad4f5f42c8dca60b3a1e3cda294814608be1afbd7200393224f80b5cca3702b4f9fea5752f9b7781320d8c3efef464afc48b79b247383e0532ccecd55fbd765d7c3f91c5bb8de4dcea3483b6e0f36dc6d4f4230451d80bc3987c2179170bc2060121ca8cd567a9ecf5fb6e111fbd972d3bfd5adedb0937551727fa2a59dc903e22f813c3b4e01332b022901c522352cdf8703492769c070e9d71855dad0a5393e9d78137ae63c90d50c9b758cad04732d3a78c80ad2eca7fd2bba1475fd72acc8a7ee67820557dff5c394a0190c2ccc3542a9ba3f3c554"}, {0x108, 0x10e, 0xffffffff, "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"}], 0x1f0}}], 0x2, 0x80) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) shutdown(r5, 0x0) pipe2(&(0x7f0000000400), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:52:26 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:26 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000029c0)={'bpq0\x00'}) [ 256.537956] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.544631] qtaguid: iface_stat: create6(lo): no inet dev 18:52:27 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:27 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 257.444909] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.462611] qtaguid: iface_stat: create6(lo): no inet dev 18:52:27 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000840)="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", 0x128) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) geteuid() r4 = creat(&(0x7f0000000740)='./file0\x00', 0x4000000000000001) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r1) prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffffe) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/context\x00', 0x2, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000680)={0x7}, 0xffffffffffffff8f) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="c6617dd5ec4ac4fa77168b26d0afc1f5", 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000380)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000ff00000080000000634840f5bf77de83fcd64e0a8910355c4f603ed60d023071a508129c7d982316a159b2efe75b9e1282595b09ac59136111de9b8688a821bacf9538ce5a4fde8bcced241de1713763b9d5d023b0995d7f8bb243f9f9b515f192eb50d3654c6249aa31d160f0e4a8ae3f7084dd5e99e7eadbc4c4e81676fb5e2b0e0d5b1e51b7d26d5fe7085d41e15e9e9394c75a68a11360d0572370f3adae635350aef208ce16443fbe4f"], 0xb0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)}, {&(0x7f0000000980)="cb5a943f31e4f6aa3dca5a5c3351cdeef75efa04f563fb12594c669951e2bfd5c4b877f5337803af6bd0140be56879a61966e40c4f9b2b9fe8b564a8e4f1f5e10a52fe3ac350ec7695ec684ab6031e082b7499c1dae850ca028f7ac26068d66224513e824ecbb23312b906d9fbbe852731680c0991fa2130fb80fb105faef7be28b5c13f791d6e8b6d13e0ccd1a3f2932e68978a04f4151666200240a8119bcac1411b8674305799ced1d0356f88f1eddaaafc6b0c09731bac0a7e", 0xbb}], 0x2, &(0x7f0000000a40)=[{0xe8, 0x115, 0x4, "245bcbad4f5f42c8dca60b3a1e3cda294814608be1afbd7200393224f80b5cca3702b4f9fea5752f9b7781320d8c3efef464afc48b79b247383e0532ccecd55fbd765d7c3f91c5bb8de4dcea3483b6e0f36dc6d4f4230451d80bc3987c2179170bc2060121ca8cd567a9ecf5fb6e111fbd972d3bfd5adedb0937551727fa2a59dc903e22f813c3b4e01332b022901c522352cdf8703492769c070e9d71855dad0a5393e9d78137ae63c90d50c9b758cad04732d3a78c80ad2eca7fd2bba1475fd72acc8a7ee67820557dff5c394a0190c2ccc3542a9ba3f3c554"}, {0x108, 0x10e, 0xffffffff, "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"}], 0x1f0}}], 0x2, 0x80) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) shutdown(r5, 0x0) pipe2(&(0x7f0000000400), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:52:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) 18:52:28 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'bcsh0\x00'}) [ 258.010292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 258.016747] qtaguid: iface_stat: create6(lo): no inet dev 18:52:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:28 executing program 3: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe(0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) write$P9_RAUTH(r2, &(0x7f0000000080)={0x372, 0x67, 0x1, {0x7, 0x2, 0xffffffffffffffff}}, 0xfffffffffffffe95) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x865) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r0, 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r5, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r7, @loopback, @loopback}}}], 0x18}}], 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@local, r7}, 0x14) 18:52:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./control\x00') lseek(r3, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0x0, 0x5, 0xa, 0xffffffffffffffff}, @generic={0x1, 0xc, 0x1, 0x61, 0x8}, @jmp={0x5, 0x0, 0x4, 0x2, 0x16, 0xc, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x3, 0x9, 0x9, 0xfffffffffffffff0, 0x1}, @alu={0x7, 0x1, 0xb, 0x5, 0x2, 0x2}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, [], 0x0, 0x13, r4, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x9, 0x8, 0x7}, 0x10}, 0x70) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x8, "1ed67d9321866248f448b5cd164bdecc324b7ccfdb998ea53f7fc92b9de94e73a52db897925ca53c284512f2926cb2de8e1e5113e62c034e72b737e155a2839b", "58707427a7fb303e1a9b4d65811865a11b2ab969eed4c2a53d8176c61551a16a", [0xe47, 0x10000]}) 18:52:29 executing program 3: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0xfc, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000700)=""/250, 0x48f2dc8a) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$PPPIOCGIDLE(r3, 0x8008743f, &(0x7f0000001240)) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/4096) fcntl$setlease(r0, 0x400, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000001280)=""/66) r6 = syz_open_procfs(r5, &(0x7f0000001140)='fdinfo/3\x00\xc6<\v\x1c\x9c\xaci\xde\xb4\n\xf1C\a\x1b\x17{\xb7\x13K\xeea\xd3\xd6\xa2\x9bm;\xda\xc6\xfc\xc5\xb2S\xb9R\xf6\xb1\x02\xcc\xab\x04\x022n\xbb\x9b\xbb\x88\xad\xc92w\xd1/de\x11N5\al\xd2\xfe\xf1\xc2\x96\x17\xafi\xd7S\xcd8U\fU#\xfc\x88g\xc7\xc9\x80>\x97\xefhz\xba\xf5\xf9+\xfb,\xc1$\x94\x9b\xc2_~L\xd6\r\x0e\x87\xc0)\xbb\xeb\x0f\xc5\x9bz\xf9\xb6\x81?\xf3$\x82\x11\xe98\x1d^\xf7\xfd\xde\xdf\xf4y\x87\xf8\x0f\x1f\x80\xfe\"\xe6S\x03\x19\x91\xaf\x18)_\x14\x9ds&t\xab\xb3S\xe8\x13#\xc2\x9f\f\tH\xa4\x17\x15\bD\xee\x85)\x84\xb8\xec}y)\x80\xc5\xa2K\x85V\xe3Q\xb48\xdd\x11E\xfa\xcf\x9dm\xaf\x9a\xae{\'X\xf5`\xb5\xc29b]\f\x17)\xbaZD(C\x97\xf1\xe0\xad\xfc\xb6') sendfile(r4, r6, 0x0, 0x80000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x100) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x1ff, 0x0, 0xff, 0x1, 0x7ff, 0xfff}, &(0x7f0000000100)=0x20) 18:52:29 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:29 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000027c0)={@remote, @broadcast}, &(0x7f0000002800)=0xc) 18:52:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) 18:52:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 259.542288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=9897 comm=syz-executor.3 18:52:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:30 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:30 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002700)=@hci, &(0x7f0000000280)=0x27) 18:52:30 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268", 0x43}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:30 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 260.316836] audit_printk_skb: 1995 callbacks suppressed [ 260.316845] audit: type=1400 audit(1573843950.758:14251): avc: denied { sys_admin } for pid=2080 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.323090] audit: type=1400 audit(1573843950.758:14252): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) [ 260.358468] audit: type=1400 audit(1573843950.798:14253): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.360796] audit: type=1400 audit(1573843950.798:14254): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 260.362201] audit: type=1400 audit(1573843950.798:14255): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.379530] audit: type=1400 audit(1573843950.818:14256): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.394903] ip6_tunnel: - xmit: Local address not yet configured! [ 260.399159] audit: type=1400 audit(1573843950.838:14257): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.440765] audit: type=1400 audit(1573843950.878:14259): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.442279] audit: type=1400 audit(1573843950.878:14260): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 260.451372] audit: type=1400 audit(1573843950.868:14258): avc: denied { sys_admin } for pid=2077 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:31 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000300)=0x7fffffff, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x4) sendfile(r2, r3, 0x0, 0x8000fffffffe) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ddffe0ef}, 0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = socket$inet(0x2, 0x80801, 0x1) ioctl$sock_SIOCSIFBR(r6, 0x8941, 0x0) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) fchdir(r7) r8 = creat(&(0x7f0000000500)='./file2\x00', 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001e40)) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a, 0xfffffffffffffffd}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) mknod$loop(&(0x7f0000001c40)='./file2\x00', 0x8003, 0x1) write$P9_RFLUSH(r8, &(0x7f0000000540)={0xffffff04, 0x6d, 0x20000}, 0xffffffffffffffeb) syncfs(0xffffffffffffffff) fallocate(r0, 0x40, 0x5, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) 18:52:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r3 = add_key(&(0x7f0000000340)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000009c0)="ed8f1f02acd5017bf540743c6994df062b2713840bf5b084a2bb344b0523f81e1934c7e398408d04613a9e301ed98e9f85c9e749f3afb856dfae046609844ac3af80a8e8225bd894ead76163deb7edcc2755cbc9b1ea7947469c1b3974fd5d5cc588170e3bfc2825ad98ec941c41bfc6b1528f421370c5b91b86fc4df508a4b765ca9b421040", 0x86, 0xfffffffffffffffb) r4 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='wlan0vboxnet0mime_type{lo@eth0\x00', r3) stat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r5}, 0x18, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r6, &(0x7f0000000b80)=""/268, 0x10c) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xfffffffffffffcb8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) getgroups(0x4, &(0x7f0000000980)=[r7, 0x0, r8, r9]) keyctl$chown(0x4, r4, r5, r9) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r10, &(0x7f0000000b80)=""/268, 0x10c) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xfffffffffffffcb8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) getgroups(0x4, &(0x7f0000000980)=[r11, 0x0, r12, r13]) write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x24, 0x8, {{0x5, 0x3, 0x4, 0x1, 0x10001, 0x9, {0x3, 0x5, 0xe41, 0x9, 0x1, 0x3f, 0x7, 0x10001, 0x0, 0x2, 0x7, r5, r12, 0x0, 0xe3a6}}}}, 0xa0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:52:32 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:32 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 262.361267] binder: 9951:9959 unknown command 0 18:52:32 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) getpeername$packet(r8, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) [ 262.382539] binder: 9951:9959 ioctl c0306201 200000c0 returned -22 18:52:32 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:33 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268", 0x43}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:33 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 262.911547] binder: release 9951:9960 transaction 42 out, still active [ 262.919706] binder: BINDER_SET_CONTEXT_MGR already set [ 262.935652] binder: undelivered TRANSACTION_COMPLETE [ 262.988451] binder: 9951:9959 ioctl 40046207 0 returned -16 [ 262.988475] binder: send failed reply for transaction 42, target dead [ 263.078784] binder: 9951:9956 unknown command 0 [ 263.083511] binder: 9951:9956 ioctl c0306201 200000c0 returned -22 [ 263.091298] binder: 9951:9959 transaction failed 29189/-22, size 0-0 line 3013 [ 263.091746] binder: undelivered TRANSACTION_ERROR: 29189 18:52:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r3 = add_key(&(0x7f0000000340)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000009c0)="ed8f1f02acd5017bf540743c6994df062b2713840bf5b084a2bb344b0523f81e1934c7e398408d04613a9e301ed98e9f85c9e749f3afb856dfae046609844ac3af80a8e8225bd894ead76163deb7edcc2755cbc9b1ea7947469c1b3974fd5d5cc588170e3bfc2825ad98ec941c41bfc6b1528f421370c5b91b86fc4df508a4b765ca9b421040", 0x86, 0xfffffffffffffffb) r4 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='wlan0vboxnet0mime_type{lo@eth0\x00', r3) stat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r5}, 0x18, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r6, &(0x7f0000000b80)=""/268, 0x10c) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xfffffffffffffcb8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) getgroups(0x4, &(0x7f0000000980)=[r7, 0x0, r8, r9]) keyctl$chown(0x4, r4, r5, r9) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r10, &(0x7f0000000b80)=""/268, 0x10c) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xfffffffffffffcb8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) getgroups(0x4, &(0x7f0000000980)=[r11, 0x0, r12, r13]) write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x24, 0x8, {{0x5, 0x3, 0x4, 0x1, 0x10001, 0x9, {0x3, 0x5, 0xe41, 0x9, 0x1, 0x3f, 0x7, 0x10001, 0x0, 0x2, 0x7, r5, r12, 0x0, 0xe3a6}}}}, 0xa0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:52:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000003c0)={0x4, 0x9, 0x7f7, 0x0, 0x7fff, 0x9}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0xfffffffffffffd77, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = socket$inet6(0xa, 0x4, 0x2b) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000100), 0xffffffffffffff7d) fchdir(r2) creat(&(0x7f0000000000)='./bus\x00', 0x80) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = open(&(0x7f0000000540)='./file0\x00', 0x20000, 0x100) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000004c0)=0x1) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x103) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x8001, @initdev, 0x6}, {0xa, 0x4e23, 0x400000, @mcast2, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x4, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x5c) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r8 = open(&(0x7f0000000240)='./bus\x00', 0x8000, 0x0) write$9p(r6, &(0x7f0000000300)="80202952f42fc67f43f04c049db4968a3c59069db97d3ce16e13e47f31085454e28a0653d16bec16cc235f128ba29c8003513d0ac9047bab22c2a5fd23782d4a0a79648559cc047c5567e7e0dcd6f2d9fd6d3e3c307caabc79f401cc7b15b7ef2e75b0846980b28c84239d5d7db4e2fd331b36afd54ca7588bf6105b93e414dd94172e", 0x83) lseek(r7, 0x0, 0x2) sendfile(r6, r8, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f00000001c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0xf29eef1ef4143bfb, &(0x7f00000000c0)={@rand_addr=0x2, @dev={0xac, 0x14, 0x14, 0x1d}, @empty}, 0xc) [ 264.033561] binder: 9990:9999 unknown command 0 [ 264.057784] binder: 9990:9999 ioctl c0306201 200000c0 returned -22 18:52:34 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) 18:52:34 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268", 0x43}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:35 executing program 1: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0xfd2d) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/neu/\x80un\x00', 0x2bb4af96633e6085, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x1000}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup/syz1\x00', 0x200002, 0x0) fcntl$dupfd(r7, 0x0, r4) r8 = dup2(0xffffffffffffffff, r4) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x101}) getsockname(r8, 0x0, &(0x7f0000000580)) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) linkat(r9, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x400) fchdir(0xffffffffffffffff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) fchdir(r10) r11 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_buf(r11, 0x107, 0x6, 0x0, &(0x7f0000000800)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r12 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r12, 0x4, 0x6100) ioctl$EVIOCSREP(r12, 0x40084503, &(0x7f00000003c0)=[0x7]) [ 264.550860] binder: release 9990:10001 transaction 45 out, still active [ 264.570426] binder: undelivered TRANSACTION_COMPLETE [ 264.603374] binder: send failed reply for transaction 45, target dead 18:52:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:35 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000580)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), r1, &(0x7f0000000180), 0xfffffffffffffffb, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000480)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000540)='./bus/file0\x00', 0x1ff) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000b4bffc), 0xfffffffffffffe91) sendto$inet(r5, &(0x7f0000000080)="dd0c558709e15592e9c7e2edcb809c3a", 0x10, 0x10000040, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0xfffffffffffffe91) sendto$inet(r6, &(0x7f0000000080)="dd0c558709e15592e9c7e2edcb809c3a", 0x10, 0x10000040, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0xfffffffffffffe91) sendto$inet(r7, &(0x7f0000000080)="dd0c558709e15592e9c7e2edcb809c3a", 0x10, 0x10000040, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc), 0xfffffffffffffe91) sendto$inet(r8, &(0x7f0000000080)="dd0c558709e15592e9c7e2edcb809c3a", 0x10, 0x10000040, 0x0, 0x0) r9 = socket(0x10, 0x80002, 0x0) bind$netlink(r9, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r9, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r9, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000b4bffc), 0xfffffffffffffe91) sendto$inet(r9, &(0x7f0000000080)="dd0c558709e15592e9c7e2edcb809c3a", 0x10, 0x10000040, 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES16], @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRES16=r2, @ANYRESOCT=r6, @ANYRES64=r7, @ANYPTR, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT=r8, @ANYPTR, @ANYRES16=r5, @ANYRESOCT=0x0], @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r9, @ANYRES32=0x0, @ANYRES64=r1, @ANYPTR64, @ANYPTR, @ANYRES64, @ANYRESDEC=0x0, @ANYPTR64]], @ANYRESHEX=r0, @ANYRESOCT=r6, @ANYPTR64], 0x0, 0x0, 0xe9fa58e2abf0670b) r10 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000a80)) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r10, 0x0, 0xfffffffffffffffc) sendfile(r4, r10, &(0x7f0000000040), 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x10000000000007) creat(&(0x7f0000000280)='./bus\x00', 0x0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000400)) fstat(r3, &(0x7f00000004c0)) fstat(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000018c0)=[r12, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000000880)=[r11, r11, r12]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) 18:52:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 265.346430] audit_printk_skb: 1890 callbacks suppressed [ 265.346438] audit: type=1400 audit(1573843955.788:14891): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 265.370883] audit: type=1400 audit(1573843955.798:14892): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 265.372912] audit: type=1400 audit(1573843955.798:14893): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 265.411483] audit: type=1400 audit(1573843955.848:14894): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3, 0x8de7d8f023d06bd7}, 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000080)=0x47d, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x183, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000680)=ANY=[@ANYBLOB="0040000004000000000000000000000000000000000000005e186565d635bde600000000098d972e16a6dcad15b4469d516b660539f1a5f44813ef91ae154594116623c9a2a9d8d0e5574b32399df99ae0fdc1a4b548bb8a71f433d8c00fbc42c4dc7db0f21e04845affffffff02efa9ae6f16770180d75ebd87348306ef209cef12f775db07ce6e171c0b5e2016d36ea4bc2f29bc4eb670610000cda2d34dbd7fbda62fda226300dd5237840252ceb6d28c46b100"/193]) r5 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7, 0x4}, 0x4) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000000)) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x20000054, &(0x7f0000000040)}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r7 = open(&(0x7f0000000280)='./file0\x00', 0x4800, 0x8f3a818d6836646c) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r8, &(0x7f0000000700)=""/250, 0x48f2dc8a) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x40, 0x0) linkat(r8, &(0x7f00000000c0)='./file0/file0\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) ftruncate(r7, 0x10099b7) sendfile(r3, r7, 0x0, 0x88000fbfffffc) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r11 = dup2(r0, r10) write$FUSE_IOCTL(r11, &(0x7f0000000040)={0x20, 0x800, 0x7, {0xfffffffffffffffc, 0x0, 0x0, 0x400001}}, 0x20) [ 265.418897] audit: type=1400 audit(1573843955.848:14895): avc: denied { dac_override } for pid=10028 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:36 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055", 0x48}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 265.441836] audit: type=1400 audit(1573843955.878:14896): avc: denied { dac_override } for pid=10028 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 265.454360] audit: type=1400 audit(1573843955.888:14897): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 265.457912] audit: type=1400 audit(1573843955.888:14898): avc: denied { dac_override } for pid=10028 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 265.476130] audit: type=1400 audit(1573843955.918:14899): avc: denied { create } for pid=10023 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 18:52:36 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 265.521675] audit: type=1400 audit(1573843955.948:14900): avc: denied { write } for pid=10023 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 18:52:36 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) pipe(&(0x7f0000000380)) 18:52:36 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000000001830000000066f2069a08f815741400010010000100080001"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:52:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 266.512517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10058 comm=syz-executor.1 18:52:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4, 0x28000054) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8, 0x9, 0x51}]}}}]}, 0x38}}, 0x0) writev(r3, &(0x7f00000023c0), 0x10000000000003ff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) dup2(r1, r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) writev(r5, &(0x7f00000023c0), 0x10000000000003ff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="ff", 0x1) write$P9_RAUTH(r6, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x10, 0x2, 0x2}}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f00000000c0)="26000000110047f10701c10640000900c43f000002000000000000000000f13a050003002ec9", 0x26) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x800, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000003afbcc5ce815fdf7bf016cf00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f000000000010001200080001007674690004000200"], 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0xfffffffd, {}, [@IFLA_NUM_TX_QUEUES={0xfc48}, @IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x38}}, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/member\x00', 0x2, 0x0) open(&(0x7f0000000580)='./file0\x00', 0x200000, 0x82) socketpair(0x8, 0xa, 0x20, &(0x7f00000005c0)) r12 = gettid() syz_open_procfs(r12, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0xfffffffffffffd24) fchdir(r13) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r14, &(0x7f0000000700)=""/250, 0x48f2dc8a) ioctl$FIGETBSZ(r14, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000a80)='./bus\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESHEX=r13, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r15, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r16, @ANYBLOB=',max_read=0x0000000000009,default_permissions,blksize=0x0000000000000400,blksize=0x0000000000000200,rootcontext=user_u,\x00\x00\x00\x00']) getegid() ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000600)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0xfffffffffffffd24) fchdir(r17) ioctl$FIGETBSZ(r17, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESHEX=r17, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r18, @ANYBLOB="2c4a726fdceff512635127b6398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r19, @ANYBLOB=',max_read=0x0000000000009,default_permissions,blksize=0x0000000000000400,blksize=0x0000000000000200,rootcontext=user_u,\x00\x00\x00\x00']) getegid() [ 266.659396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57609 sclass=netlink_route_socket pig=10064 comm=syz-executor.3 18:52:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 266.724565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57609 sclass=netlink_route_socket pig=10064 comm=syz-executor.3 [ 266.796924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57609 sclass=netlink_route_socket pig=10064 comm=syz-executor.3 [ 266.854174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57609 sclass=netlink_route_socket pig=10064 comm=syz-executor.3 [ 266.912577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57609 sclass=netlink_route_socket pig=10064 comm=syz-executor.3 18:52:37 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 267.217649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44803 sclass=netlink_route_socket pig=10079 comm=syz-executor.1 18:52:37 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x802, 0x0) ppoll(&(0x7f00000019c0)=[{}], 0x2000000000000048, &(0x7f0000000040)={0x77359400}, 0x0, 0xfffffffffffffff5) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0xa8002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@caif=@dbg, 0x80, &(0x7f0000001dc0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)=""/96, 0x60}}, {{&(0x7f0000005c40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005cc0)}}], 0x4, 0x40000000, 0x0) select(0x0, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x200, 0x528e}, &(0x7f0000001880)={0x80, 0x8, 0x7, 0x0, 0x3, 0x0, 0x2e}, &(0x7f00000018c0)={0x0, 0x0}) sendmsg(r0, &(0x7f0000007300)={&(0x7f0000005f00)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000006000)=[{0x0}], 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="4000000000c4bb3023ae55b5fb0bbdbb061874c97da636cfea2518483206af419bc0000000b700000071bbcd857934432875b21c305b1b999122af5b5ecdd8417f9910908d81000296914ace4561a4ae23d7223fcd504dbd"], 0x58}, 0x4000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) r5 = getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ptrace(0x10, r5) ptrace(0x11, r5) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000180)={&(0x7f0000000580)=""/198, 0xc6}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000408}, 0xc, &(0x7f0000000540)={&(0x7f0000007340)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRESOCT=r4], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x440) ftruncate(r8, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) open(&(0x7f0000000300)='./bus\x00', 0x2002, 0x1) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r8, 0x0, 0x8000fffffffe) 18:52:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:37 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055", 0x48}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 267.269046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:52:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x96Z/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xb7>\xd6#\xe1^\xa5\xfb\xfe\x03\xf8\vH\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\x0f\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000a40)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\x03\x90\xd9\xadtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xc6w\x8b\x81\x01\x00\x00\x00\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\x01\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n\x97|q\x00\xc5\xabDb N\xbc\xcf\x175cbR\xc8a\xe5T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe,\x01\x96\xc0\xa7\xddko\x9d/R\x87\\g;\xbc\x97\x06y\xe3m\xf2Z%*\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(\xcd\xee\x80K\xd5~\x02`\x11\xf2\xa6\xa9\xce\x0e\xfe/WvW\x1eq\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9f&\n\xc5\xa47\xb5\x8f\xb8y\xae\'9\x86\xa3\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1u\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\x88c0\xad\xd3\x17\\Jc\x16\xf7Dd\x9an5\xff\xe0\x1f\x87\\G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\b\xc4h\xb2;\xa9\xc4\x14?fi\xf8\"|\xb3\x01\xb8u\x16\xf6\xf6\xdd\xb1\xa7\x98\xae(\x02\xd8\xeb\x97\xa8G\xe3\f\xa7\xbd\xd2{\xc0\x1e#9\x06\xf7L\x1b', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x19, 0x21, 0xc, 0x5, 0x8, 0x3ff, 0x2, 0x3d, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x7ffd) [ 267.781697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10095 comm=syz-executor.3 18:52:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:38 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4000, 0x0) 18:52:38 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000100)=""/44, 0xfffffffffffffed2, 0x0) r0 = memfd_create(&(0x7f0000000040)='u', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1021910}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x13}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x748}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x985}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5e2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x40c4) r2 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:52:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:39 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055", 0x48}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:39 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @loopback, @loopback}}}], 0x18}}], 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}, r3}, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x0) read(r5, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r5) syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') close(r4) 18:52:39 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x8}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x800) 18:52:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:39 executing program 3: r0 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) sendfile(r1, r0, 0x0, 0x8000fffffffe) timer_create(0x7, &(0x7f0000000040)={0x0, 0x20}, &(0x7f0000000080)=0x0) timer_gettime(r2, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) dup2(r3, r1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x800, 0xffffffff, 0x3, 0x7}, 0x10) 18:52:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:40 executing program 1: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xff, 0x147b43eae57d5408) socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000003c0)={0x4, 0x9, 0x7f7, 0x0, 0x7fff, 0x9}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) socket$inet6(0xa, 0x7, 0xfffffffffffffffe) fchdir(r2) creat(&(0x7f0000000000)='./bus\x00', 0x84) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000680)=""/255) fchdir(r3) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, [], 0x14}, 0x9}, {0xa, 0x4e23, 0x400004, @mcast2, 0x9}, 0x2000e8, [0x9, 0x0, 0x2, 0x200000, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x5c) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000140)=0x8) r5 = add_key(&(0x7f0000000880)='user\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="e14bc9c96bc62c45dfbf610eac16d90092a8c28ade615f0d85cd63ab18a102292f139b69c4b508919ec490e2e8d5fef348da89036a094923e10bd2606282ccc1680e535be668975e69a36709a79da08f103bddb81739545397ccd306de5ac5c5f4668f94f199243bea43deaa30fd2a4b4bfca52af6012376bc2c118a848b767cf4ce31af743ea9e4beb9e2d7a455c4137492d1f70b9ada9ff747db2b66a1186f2224d5062cd26c64015b7f6805e84eb66903b6e9fa19990335d98038ff14bc6a8874122408f3ea535184e58dad6bf1eece95c441926e35726873bb6e", 0xdc, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key(&(0x7f0000000340)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000009c0)="ed8f1f02acd5017bf540743c6994df062b2713840bf5b084a2bb344b0523f81e1934c7e398408d04613a9e301ed98e9f85c9e749f3afb856dfae046609844ac3af80a8e8225bd894ead76163deb7edcc2755cbc9b1ea7947469c1b3974fd5d5cc588170e3bfc2825ad98ec941c41bfc6b1528f421370c5b91b86fc4df508a4b765ca9b421040", 0x86, 0xfffffffffffffffb) r7 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000400)='wlan0vboxnet0mime_type{lo@eth0\x00', r6) stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r9, &(0x7f0000000b80)=""/268, 0x10c) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xfffffffffffffcb8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) getgroups(0x4, &(0x7f0000000980)=[r10, 0x0, r11, r12]) keyctl$chown(0x4, r7, r8, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) keyctl$chown(0x4, r5, r8, r13) r14 = open(&(0x7f0000000240)='./bus\x00', 0x80, 0x20) write$9p(r4, &(0x7f0000000300)="80202952f42fc67f43f04c049db4968a3c59069db97d3ce16e13e47f31085454e28a0653d16bec16cc235f128ba29c8003513d0ac9047bab22c2a5fd23782d4a0a79648559cc047c5567e7e0dcd6f2d9fd6d3e3c307caabc79f401cc7b15b7ef2e75b0846980b28c84239d5d7db4e2fd331b36afd54ca7588bf6105b93e414dd94172e", 0x83) sendfile(r4, r14, &(0x7f0000000040), 0x8000fffffffe) 18:52:40 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) creat(0x0, 0x0) 18:52:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f0000000a00)=""/149, 0x95}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000680)=""/60, 0x3c}, {&(0x7f0000000740)=""/37, 0x25}], 0x9, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000001c0)=0x800a74, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000440)=0xc) ptrace$setopts(0xffffffffffffffff, r5, 0xfb, 0x5d) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000780)) getpgid(0x0) unshare(0x4040000000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) signalfd(r6, &(0x7f0000000000)={0x8001}, 0x8) syz_emit_ethernet(0x56, &(0x7f0000000b40)={@random="d2856a31fe15", @empty, [], {@canfd={0xd, {{0x4, 0x1}, 0xb, 0x2, 0x0, 0x0, "4505c58a83a2b94636c7243d71e387474cbda8acdab9f19cde84027ad1ac5812cd0f869124296b403f7f73eaa3749bb986ea94532ba3fe251f4e8454c41ba12a"}}}}, &(0x7f00000003c0)={0x0, 0x2, [0x525, 0x863, 0x2e4, 0x8f5]}) r7 = creat(0x0, 0x10) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0105296dccf58ac123332eccc01200000800061085ca0000fb72e90d52f500791b80ff0f0000e17ae8d000b0a7d182c25321fe4000000000000000000000000023000000000000f92ff973420c20b67a286ffd13c3b25942798768c939ba340e409b060000000000703fc40000ecf9d399c51b7ccd73d21f752b9859de3a69294a1e0885aedb9cfc2bdba2645d0401d0c252a9b64540474251386cf8a112a7fd6e8d2fc6fe631a9132ece053efa6c92a7eba85dd757e198749c68d31c6502693b20fe9e9adbbd28d75e0a46f8b011f1e1d664c23c25311e122b4edc401e270fd93113717aee4f8694dbd3e47173047"], 0x1}}, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 18:52:40 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 270.362426] audit_printk_skb: 2568 callbacks suppressed [ 270.362435] audit: type=1400 audit(1573843960.798:15758): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.366200] audit: type=1400 audit(1573843960.798:15757): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 270.368044] audit: type=1400 audit(1573843960.808:15759): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.370072] audit: type=1400 audit(1573843960.808:15760): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.371968] audit: type=1400 audit(1573843960.808:15761): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.373803] audit: type=1400 audit(1573843960.808:15762): avc: denied { sys_admin } for pid=2082 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.373898] audit: type=1400 audit(1573843960.808:15763): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.405544] audit: type=1400 audit(1573843960.838:15764): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:41 executing program 1: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xff, 0x147b43eae57d5408) socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000003c0)={0x4, 0x9, 0x7f7, 0x0, 0x7fff, 0x9}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) socket$inet6(0xa, 0x7, 0xfffffffffffffffe) fchdir(r2) creat(&(0x7f0000000000)='./bus\x00', 0x84) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000680)=""/255) fchdir(r3) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, [], 0x14}, 0x9}, {0xa, 0x4e23, 0x400004, @mcast2, 0x9}, 0x2000e8, [0x9, 0x0, 0x2, 0x200000, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x5c) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000140)=0x8) r5 = add_key(&(0x7f0000000880)='user\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="e14bc9c96bc62c45dfbf610eac16d90092a8c28ade615f0d85cd63ab18a102292f139b69c4b508919ec490e2e8d5fef348da89036a094923e10bd2606282ccc1680e535be668975e69a36709a79da08f103bddb81739545397ccd306de5ac5c5f4668f94f199243bea43deaa30fd2a4b4bfca52af6012376bc2c118a848b767cf4ce31af743ea9e4beb9e2d7a455c4137492d1f70b9ada9ff747db2b66a1186f2224d5062cd26c64015b7f6805e84eb66903b6e9fa19990335d98038ff14bc6a8874122408f3ea535184e58dad6bf1eece95c441926e35726873bb6e", 0xdc, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key(&(0x7f0000000340)='ceph\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000009c0)="ed8f1f02acd5017bf540743c6994df062b2713840bf5b084a2bb344b0523f81e1934c7e398408d04613a9e301ed98e9f85c9e749f3afb856dfae046609844ac3af80a8e8225bd894ead76163deb7edcc2755cbc9b1ea7947469c1b3974fd5d5cc588170e3bfc2825ad98ec941c41bfc6b1528f421370c5b91b86fc4df508a4b765ca9b421040", 0x86, 0xfffffffffffffffb) r7 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000400)='wlan0vboxnet0mime_type{lo@eth0\x00', r6) stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r9, &(0x7f0000000b80)=""/268, 0x10c) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xfffffffffffffcb8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) getgroups(0x4, &(0x7f0000000980)=[r10, 0x0, r11, r12]) keyctl$chown(0x4, r7, r8, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) keyctl$chown(0x4, r5, r8, r13) r14 = open(&(0x7f0000000240)='./bus\x00', 0x80, 0x20) write$9p(r4, &(0x7f0000000300)="80202952f42fc67f43f04c049db4968a3c59069db97d3ce16e13e47f31085454e28a0653d16bec16cc235f128ba29c8003513d0ac9047bab22c2a5fd23782d4a0a79648559cc047c5567e7e0dcd6f2d9fd6d3e3c307caabc79f401cc7b15b7ef2e75b0846980b28c84239d5d7db4e2fd331b36afd54ca7588bf6105b93e414dd94172e", 0x83) sendfile(r4, r14, &(0x7f0000000040), 0x8000fffffffe) 18:52:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)) io_submit(0x0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 270.407450] audit: type=1400 audit(1573843960.848:15765): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 270.409312] audit: type=1400 audit(1573843960.848:15766): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000540), 0xc6800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x35e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="00aac2a144700003967fe4fb7367bda6d3e08270d0bd268b5265f8dc0594a017741e7ab7c9c97a9a64fd532006e20a2cf613f92ca6be5011b4c1588808a9eab88e500ee8e3fd0cbef19c11ce1de2777e7929e8db1056639a80912521585c305abf7c93d100"/110, @ANYRESDEC=r0, @ANYBLOB="0000000000000000000001000098000000000c41000000000014"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000080)="2400000024007fffffff9e000000770bdc148afb0100000009000000ffffffff0100ff10", 0x24) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000080)="2400000024007fffffff9e000000770bdc148afb0100000009000000ffffffff0100ff10", 0x24) write(r4, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)) sendfile(r2, r2, &(0x7f00000001c0), 0x2d) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f00000006c0)=""/130, 0x6}) read(r1, &(0x7f0000000880)=""/250, 0xffffffffffffffa9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000400)='./file2\x00', 0x0) mkdir(&(0x7f0000000680)='./control\x00', 0x0) r7 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e68c) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000500)=0x1) mknodat(r7, &(0x7f0000000000)='./control\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e40)) ioctl$ASHMEM_SET_SIZE(r1, 0x40047703, 0x4) write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0), 0x4) fcntl$getownex(r7, 0x10, 0x0) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) 18:52:42 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 272.180438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pig=10219 comm=syz-executor.3 [ 272.236923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pig=10222 comm=syz-executor.3 18:52:42 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r7 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x4b}, 0xff7f) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) 18:52:43 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:43 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:43 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:43 executing program 2: lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:43 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:43 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, &(0x7f00000018c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:43 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r1, 0x1269, 0x0) write(r0, &(0x7f00000003c0)="af2683ac1b32af3eb4d586254a11cfd28dccd27ccf25a1d1a182769393cdf34a1d31b45a2fb41d687c634c4b56eb7dd12dc2cb5961a61f5a7c8cfe6643aaa775edda38e26a5f15baeb8546a096c5c9898d62b1b7d1fe279576f2cc1c9d825ac6f47e97d25cefe6384ef5feaad7d5e86d3e6560b05b9730be04485e38c70504ce62043b2aa7d2ba7ae1c1c40f9c0e023f4b14dd4e", 0x100000253) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, 0x0, &(0x7f0000000480)) linkat(r0, 0x0, r1, &(0x7f00000006c0)='./file0/file0\x00', 0x0) fchdir(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu\x00-7\xdc\x1e\x12\x9dr\x01\x85~Q\xcf^O1\xce\x9c\xb0\x8a\xa0b\xc6\xea\xf38d\x1f\x8b\xed\xca\xf9\x15\xf4X&\b+S\xda\xcd\xf3\xd4\xe8r\x922\xf6\xd9\xc4Mt\x92\x88\x01\xab\x923K\xbd\xba-\xdc\xc8.\xf4\xab\x1f5\xb6\xcc\x8f=A\x03\x17\x94\x89\xec\x04', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000500)='./bus\x00', 0x0, 0x0, 0xfffffffffffffc18, 0x800000000000002) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) sched_rr_get_interval(0x0, 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x28000, 0x80) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000001c0)) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, 0x0) ftruncate(r5, 0x6) creat(&(0x7f00000004c0)='./bus\x00', 0xfffffffffffffffd) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[]}}, 0x0) 18:52:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, &(0x7f00000018c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:44 executing program 2: lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:45 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) r6 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000280)={0x4b}, 0xff7f) 18:52:45 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000040)) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(r3, r3, &(0x7f0000000240), 0x2008000fffffffe) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000ff7f000006000000000000000100000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000008a3f000001800000030000000000000040000000000000000000000000000000ffffffff00"/436]) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r5 = dup2(0xffffffffffffffff, r0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) renameat2(r6, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f0000000300)='./file0\x00', 0x6) write$P9_RGETATTR(r6, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x210000, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d80)={0x1a4, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x52}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd931}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x566}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf65a}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x2da}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x6, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3bc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x1a4}}, 0x840) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="83030000", @ANYRES16=r8, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x721aedb76be775cb}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x220, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4d}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @rand_addr="877682617ca93727c5a8f2232ac37696", 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6cdb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) 18:52:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, &(0x7f00000018c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:45 executing program 2: lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:45 executing program 1: mkdir(0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000440)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9c\x19v9c\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfeO\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x8f\xe9\xbev\xd1O3\xcecJ\x95\x00@\b4-\x89}{\x0fJ\xa1\xbc\x03\xe5\xf5T\x89\"%\f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r2 = socket(0x1, 0x1, 0x9) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x20, 0x0, @mcast1}, 0x1c) r3 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x364, 0x0, 0x0, 0x16c, 0x16c, 0x16c, 0x298, 0x298, 0x298, 0x298, 0x298, 0x3, &(0x7f00000000c0), {[{{@ipv6={@remote, @empty, [0xffffffff, 0x0, 0xffffff00, 0x1000001ff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'vxcan1\x00', 'ifb0\x00', {0xff}, {0xff}, 0x3b, 0x7f, 0x9, 0x8}, 0x0, 0x110, 0x16c, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9, 0x3, 0x3, [0x9, 0x0, 0x5, 0x2f, 0x7, 0x8, 0x8a1, 0x1f, 0x40, 0x18, 0x0, 0x200, 0x6, 0x357, 0x200, 0x8], 0xc}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty, [0xff, 0xff, 0x2b060a7b4efa2295, 0xffffff00], 0x4e21, 0x4e24, 0x4e23, 0x4e20, 0x5, 0x393, 0x0, 0xffffffff, 0x4}}}, {{@ipv6={@remote, @local, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff, 0xff000000, 0xffffff00, 0xff], 'bridge0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x61, 0x1, 0x2, 0xdedb400dee764a37}, 0x0, 0xec, 0x12c, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CT0={0x40, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x9, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x3c0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000181b526bb59a7004b38e0000000000000000000000000000001f00800006000000a005060058024f9f80a3306e074fd9ab0d7bd0d93c7d71c54c000000000000004000b004000000e8050000b9cebe3b02000000e1771f61c1d9c352aa003c28337ce53f54ce3d5523599897408f5344e9caca56020035fb843216ec6b83eb7a6a4c8f80497cce39afdfd6545993b918da07d9000000000075dbf4e9c2abeb7236086349441e51b06ca5fb4757630dc7000000000000000000000000000010004000"/227], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000340)="1f8f", 0x2}], 0x1) tkill(r4, 0x17) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(0x0, 0x0) chown(0x0, 0x0, 0x0) 18:52:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x1, &(0x7f00000018c0)=[0x0]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:45 executing program 2: pipe(0x0) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 275.369679] audit_printk_skb: 2172 callbacks suppressed [ 275.369688] audit: type=1400 audit(1573843965.808:16491): avc: denied { net_admin } for pid=2082 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 275.382267] audit: type=1400 audit(1573843965.818:16492): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x1, &(0x7f00000018c0)=[0x0]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 275.418088] audit: type=1400 audit(1573843965.858:16493): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 275.421556] audit: type=1400 audit(1573843965.858:16494): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 275.426407] audit: type=1400 audit(1573843965.868:16495): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:46 executing program 1: mkdir(0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000440)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9c\x19v9c\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfeO\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x8f\xe9\xbev\xd1O3\xcecJ\x95\x00@\b4-\x89}{\x0fJ\xa1\xbc\x03\xe5\xf5T\x89\"%\f', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) r2 = socket(0x1, 0x1, 0x9) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x20, 0x0, @mcast1}, 0x1c) r3 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x364, 0x0, 0x0, 0x16c, 0x16c, 0x16c, 0x298, 0x298, 0x298, 0x298, 0x298, 0x3, &(0x7f00000000c0), {[{{@ipv6={@remote, @empty, [0xffffffff, 0x0, 0xffffff00, 0x1000001ff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'vxcan1\x00', 'ifb0\x00', {0xff}, {0xff}, 0x3b, 0x7f, 0x9, 0x8}, 0x0, 0x110, 0x16c, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x9, 0x3, 0x3, [0x9, 0x0, 0x5, 0x2f, 0x7, 0x8, 0x8a1, 0x1f, 0x40, 0x18, 0x0, 0x200, 0x6, 0x357, 0x200, 0x8], 0xc}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty, [0xff, 0xff, 0x2b060a7b4efa2295, 0xffffff00], 0x4e21, 0x4e24, 0x4e23, 0x4e20, 0x5, 0x393, 0x0, 0xffffffff, 0x4}}}, {{@ipv6={@remote, @local, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff, 0xff000000, 0xffffff00, 0xff], 'bridge0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x61, 0x1, 0x2, 0xdedb400dee764a37}, 0x0, 0xec, 0x12c, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CT0={0x40, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x9, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x3c0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000181b526bb59a7004b38e0000000000000000000000000000001f00800006000000a005060058024f9f80a3306e074fd9ab0d7bd0d93c7d71c54c000000000000004000b004000000e8050000b9cebe3b02000000e1771f61c1d9c352aa003c28337ce53f54ce3d5523599897408f5344e9caca56020035fb843216ec6b83eb7a6a4c8f80497cce39afdfd6545993b918da07d9000000000075dbf4e9c2abeb7236086349441e51b06ca5fb4757630dc7000000000000000000000000000010004000"/227], 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000340)="1f8f", 0x2}], 0x1) tkill(r4, 0x17) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(0x0, 0x0) chown(0x0, 0x0, 0x0) 18:52:46 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000300)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff36) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) fchdir(r4) r5 = creat(&(0x7f0000000500)='./file1\x00', 0x181) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e40)) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) mknod$loop(&(0x7f0000001c40)='./file2\x00', 0x8003, 0x1) write$P9_RFLUSH(r5, &(0x7f0000000540)={0x2bd, 0x6d, 0x20000}, 0xffffffffffffffeb) syncfs(0xffffffffffffffff) fallocate(r0, 0x40, 0x5, 0x2bf) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) futex(0x0, 0xb, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getpid() pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) r7 = openat(r6, &(0x7f0000000180)='./file1\x00', 0x80401, 0x0) faccessat(r7, &(0x7f0000000080)='./file0\x00', 0x200000003, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGSID(r8, 0x5429, &(0x7f00000003c0)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) fcntl$getown(r9, 0x9) socket$netlink(0x10, 0x3, 0xd) [ 275.455460] audit: type=1400 audit(1573843965.898:16496): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 275.463139] audit: type=1400 audit(1573843965.898:16497): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:46 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 275.469414] audit: type=1400 audit(1573843965.908:16498): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 275.498390] audit: type=1400 audit(1573843965.948:16499): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 275.500212] audit: type=1400 audit(1573843965.948:16500): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 276.438273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32800 sclass=netlink_route_socket pig=10323 comm=syz-executor.3 18:52:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x1, &(0x7f00000018c0)=[0x0]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:47 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) creat(&(0x7f0000000300)='./file1\x00', 0x0) 18:52:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x800) fchdir(0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xc) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xb, &(0x7f00000003c0)={0x0, 0x53}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = open(&(0x7f0000000600)='./bus/../file0\x00', 0x26880, 0x100) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000340), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80585414, &(0x7f0000000480)=""/102) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r5, &(0x7f0000000700)=""/250, 0x48f2dc8a) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) r8 = socket$inet6(0xa, 0x400000000001, 0x0) close(r8) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) ioctl$TCGETS(r9, 0x5401, &(0x7f00000005c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000080)=0x54) creat(&(0x7f0000000280)='./bus\x00', 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f00000000c0)=0x20, 0x4) 18:52:47 executing program 3: pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfab79be4) write$P9_RXATTRCREATE(r0, 0x0, 0xfffffffffffffe62) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000300)=""/241) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) pipe2(0x0, 0x4000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) sync() ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000400)={r6, r7+10000000}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) close(r8) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1c, &(0x7f0000000600)="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", 0x1000) 18:52:47 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:47 executing program 2: pipe(0x0) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:48 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:48 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:48 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000540)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000a80)) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) fcntl$getown(r3, 0x9) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)={'filter\x00'}, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000440)) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8eff", @ANYRESDEC=r6]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) 18:52:48 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:48 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0xffffff38, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x6a8301494e43236e) sendto$inet6(r0, &(0x7f0000001440)="c7", 0x1, 0xc001, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000a80)={&(0x7f0000000340)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000000240)="f1", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="c5", 0x1, 0x0, 0x0, 0x0) 18:52:48 executing program 2: pipe(0x0) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:48 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), r1, &(0x7f0000000180), 0xfffffffffffffffb, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, 0x0, &(0x7f0000000480)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r5, &(0x7f00000009c0)={0xffffffffffffff40, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000a80)) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x140, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2e}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbed6}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054014) creat(&(0x7f0000000280)='./bus\x00', 0xb8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) 18:52:49 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) 18:52:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:49 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:49 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:49 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), r1, &(0x7f0000000180), 0xfffffffffffffffb, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, 0x0, &(0x7f0000000480)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r5, &(0x7f00000009c0)={0xffffffffffffff40, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000a80)) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x140, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2e}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbed6}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054014) creat(&(0x7f0000000280)='./bus\x00', 0xb8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) 18:52:50 executing program 3: pipe(0x0) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) lseek(r2, 0x20000010000, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f00000004c0)='./file1\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r4, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r6 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r7 = dup2(r5, r6) write$P9_RREMOVE(r7, 0x0, 0x0) r8 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000200)='./bus\x00', r8, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r9}) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:50 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 280.377025] audit_printk_skb: 2136 callbacks suppressed [ 280.377033] audit: type=1400 audit(1573843970.818:17213): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 280.412933] audit: type=1400 audit(1573843970.848:17214): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.413104] audit: type=1400 audit(1573843970.848:17215): avc: denied { dac_override } for pid=10420 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.425074] audit: type=1400 audit(1573843970.848:17216): avc: denied { dac_override } for pid=10420 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.434687] audit: type=1400 audit(1573843970.848:17217): avc: denied { dac_override } for pid=10420 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.470726] audit: type=1400 audit(1573843970.908:17218): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:51 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 280.509726] audit: type=1400 audit(1573843970.928:17219): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.596948] audit: type=1400 audit(1573843971.048:17220): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.609887] audit: type=1400 audit(1573843971.048:17221): avc: denied { create } for pid=10413 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 280.611298] audit: type=1400 audit(1573843971.048:17222): avc: denied { write } for pid=10413 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 18:52:51 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8000001b, &(0x7f0000002400)={@local}, 0x0) 18:52:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000200)="40bc2e32cf693a626bea9b1bc381df555375f4ebe303d47eef574bb9a2f04cf8f5fd174174e582c9281de0952bfd1a957578c2cf3df113649a96ee49c7f559f07a65ca4212cc31ac12469ad800107f287909c3f9933b9d86868e9367500ec02e34167a7fde56d64a70a232fcc95f57f317b09741b7a802c46d8582d1aedbbdc93de2e6676c8f53", &(0x7f00000002c0)=""/228, 0x4}, 0x20) ftruncate(r0, 0x8d) io_setup(0xa4cc, &(0x7f0000000040)=0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) dup2(r5, r1) fcntl$setstatus(r5, 0x4, 0x46c00) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1}]) 18:52:51 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:51 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @loopback}}}], 0x18}}], 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x3, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x21}, @jmp={0x5, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, 0x10}, @call={0x85, 0x0, 0x0, 0x5b}], &(0x7f0000000080)='GPL\x00', 0x0, 0x52, &(0x7f00000000c0)=""/82, 0x41100, 0x0, [], r2, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0x8000, 0x4844}, 0x10}, 0x70) writev(r3, &(0x7f0000000000), 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)=""/112, 0x70) 18:52:51 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:52 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000240)) rt_tgsigqueueinfo(r1, 0x0, 0x13, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0xffffffffffffffff, r5, 0x0, 0xe, &(0x7f0000000340)='selinuxwlan0-\x00'}, 0x30) timer_create(0x4, &(0x7f0000000000)={0x0, 0x1a, 0x82fe1fa6257ac0cf, @tid=r6}, &(0x7f0000000040)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmmsg(r0, &(0x7f00000092c0), 0x685, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) 18:52:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x0, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x8) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0xc867076f160aa902) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1a) r4 = open(0x0, 0x8000, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000000000000000000000000000000007a606a37a11dea898679f78194e70853710a3a2518bd1cc36ed8a9834d41bb040ec2d35be94c5feed7116f3553b8af9bafc7d1a29c037886af329a704a56d0bb552c924c6cf7111c27a78199c796b8d8798410658ff411c78cc51c6255eaca5e65a12b115a6f9683d86328e76a6e1ca781f0211097df982090eb2c4477490edab4ccb98fa911bb6efd278717c3e67417d7dc6b5be77a8ed64c47e42afd5bce5511fabaa5a51d980b5921d1d752cf516236cb75579343d14f274d7c893690524f09dafbf3dd14c825b9a2b8e399bc1f661824a849550222473f1507726b5ab5c5f070"]) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000001200)=""/4096) signalfd4(r4, &(0x7f0000000840), 0x8, 0x0) ioprio_get$uid(0x400000000003, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000007c0)={{0x2, 0x0, @loopback}, {0x307, @remote}, 0x0, {0x2, 0x4e23, @remote}}) sendmmsg(r1, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}, 0x5}], 0x1, 0x0) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000001200), 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000380)='wlan1GPL\x00', 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) 18:52:52 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a", 0x48, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:53 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'sit0\x00'}) 18:52:53 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a", 0x48, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:53 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x251, 0x80c00) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x1}}, 0x40004) r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200, 0x8) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000461000), 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000461000)={0x10, 0x0, 0x2}, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="311a724623fed716d80bf7306767ac37a1", @ANYRES16, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYBLOB="64a724cfa305b15b28d5e516060136abfdb9b37dd7be394b556d18aff8db5c3f1f4097da00eb7597db58daa355f0507603844692ff7695100427219c78dad47a2e67ec", @ANYRESOCT=r3], @ANYRESDEC=r2, @ANYRES16, @ANYPTR64=&(0x7f00000005c0)=ANY=[], @ANYBLOB="df16d6b6a21f20", @ANYRESOCT, @ANYRES16], @ANYBLOB], 0x2}}, 0x8011) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f00000025c0)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r9, &(0x7f0000000700)=""/250, 0x48f2dc8a) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r10, &(0x7f0000000700)=""/250, 0x48f2dc8a) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, r9) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f00000025c0)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0xfffffef3) read(r12, &(0x7f0000000200)=""/250, 0x50c7e70e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)) 18:52:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a", 0x48, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:53 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000007740)={0x2, &(0x7f0000007700)=[{0x3, 0x7, 0x9, 0xf2e}, {0x5, 0xfc, 0x1f, 0x1ff}]}) 18:52:54 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d", 0x6c, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:54 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:54 executing program 3: gettid() r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'\x00\x00\x04\x00', 0x4fff}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x0, &(0x7f0000000300)) r5 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r5) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x100, 0x105082) r7 = memfd_create(&(0x7f0000000000)='\x00\x00', 0x0) pwritev(r7, &(0x7f0000000c80)=[{&(0x7f0000000640)="ddde3585e51be3fd9cbd8f4e7f04e2bd4ad846b960640f975fd23817f56068efa1ed28bd226cfe44073cd070a0ff4b810f3a07a53ed03f9a8638e5711655a4f659ce14e5a42afe8fed87d9488b789da6c857e513fb3c145547ec3da8c10ec3fbf81be3f9820527656cd1a21211a59abc0e5b343d5e", 0x75}, {&(0x7f00000009c0)="5038ae1bc600ccf097cba43c0ed892675dde5fb570c956fc6ebc4d88ae6c86802b6c648fab55a97c18dcd17e3f8f9014eb660edd488c734c34161b55e01576f5f041c5e3021d0fa491413c6b9c451b9eb02a616acd85ab2b5a9c207e6bc33c31316451894b5eebfe26ab2eb4e01a54e00974b0332058d6208dde5440", 0x7c}, {&(0x7f0000000540)="d9e24d", 0x3}, {&(0x7f0000000ac0)="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", 0xfc}, {&(0x7f0000000780)="33dada9abe953f45a780ee2646e091c614ccd1a7c66c0fbf9fce0e251c49dfa21b21a1d8380d65bdaf560babb4e1bba0d9eb1c1b", 0x34}, {&(0x7f00000008c0)="2208fe8427639d54bb69e3e1517836f2f52f70f17487a927a9dba042889c7995a5bd5da25071b0711fc2d6be7f6891898f0ef9a78bcd1de4f0cb67567984099797952214446f7c296767ac68c1cdc9c9b760fda518e89fb020a804969ca6", 0x5e}, {&(0x7f0000000bc0)="5db4996506557eac98d21aa62e523ae1011bcd1e3e3e14c9a86650ee060a7e089ada1b0ee98b199a2641c89f3131226a483e88bb7b3f8426e191fb09cdfff0ad339022c2a3c43006693cee116cf9f372cabfc14a03ab7f25310cdef7d38fddc72edf1f569c7b19f8b114cee7cb0fc796fd3e996528e1f3bfa64066518fa247a63801379427d843b6e43a39cd427d2217e416bb0e46ff0543d29e8d0224ee46056882285e5b9d572f8337", 0xaa}], 0x7, 0x81000) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) fcntl$setstatus(r5, 0x4, 0x0) sendfile(r6, r5, 0x0, 0x80004) r8 = socket(0x5, 0x6, 0xa) write(r8, &(0x7f0000000580)="124d78445329ca4fa79d00d7530100effa90bf3be1ad", 0x16) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r8], 0x2}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendfile(r4, r8, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r12}) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4d499baa9d6f46f247940dc52ad23f9bbddf45c578b7645b1fdbd8bbdd1fedc1e5c6350ea9ccc69aef5681d3889fd8e88c6d554ab3a142492d7c091c9efded12c3328bcd65f6c6e4fa8c1612195d27a2750161ebdfbfbd8bbb1ae15f602a254afc99e70972841113cdc6c03bd2dd1931c774776d29ffa42345385e6626c7182f8b80f0d634dd58261f6b4628173dd9191f19235bd33278b17bb93c28a94d21740f26b84eff535799cc8798ba620b01de7609d74564227dec8e2df51255443506607ef6837e7fd7110e90d06c2af5c8ff30454d8557dc2d", @ANYRES16=r13, @ANYBLOB="20002bbd7000fedbdf25010000001c00030008000500ac1414aa080004000400000008000500ac7c71101e0001080004001c00000008000500170d4146"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc810020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='V\x00\x00o\x00', @ANYRES16=r13, @ANYBLOB="f31c2cbd7000fbdbdf250d000000380002000800080080000000080005009906000014000100317a23f10a22fa36eba8393d8b528bdf46f91448d92e8688da770cb00124336608000d0000000000080002004e23000024000200080007000300000008000e004e24000008000d000000e0ff07000d00020000000800760000f8fffffea7b633d4b56fbad808530c947923"], 0x78}, 0x1, 0x0, 0x0, 0x4002014}, 0x1000) sendmsg$IPVS_CMD_DEL_DEST(r11, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 18:52:55 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x100000) 18:52:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d", 0x6c, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:55 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d", 0x6c, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:55 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0x0, &(0x7f0000000680)}) 18:52:55 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788f", 0x7e, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 285.404374] audit: type=1400 audit(1573843975.848:18032): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_vif\x00') prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x29) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window, @timestamp, @sack_perm, @mss, @window, @window, @sack_perm, @timestamp], 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:52:56 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 285.416626] audit: type=1400 audit(1573843975.858:18033): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 285.424915] audit: type=1400 audit(1573843975.858:18034): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788f", 0x7e, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 285.425755] audit: type=1400 audit(1573843975.858:18035): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 285.430591] audit: type=1400 audit(1573843975.868:18036): avc: denied { sys_admin } for pid=2081 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:56 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3c880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r4, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0}}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r6, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000002c0)) ptrace$pokeuser(0x6, r7, 0x388, 0xfffffffffffffffe) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) [ 285.432435] audit: type=1400 audit(1573843975.868:18038): avc: denied { net_admin } for pid=2077 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 285.433092] audit: type=1400 audit(1573843975.868:18037): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 285.435048] audit: type=1400 audit(1573843975.868:18039): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:52:57 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') 18:52:57 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 18:52:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788f", 0x7e, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:57 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:57 executing program 1: 18:52:57 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0", 0x87, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:57 executing program 1: 18:52:57 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0", 0x87, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:57 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:58 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) 18:52:58 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:52:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdir(0x0, 0x0) 18:52:58 executing program 3: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendfile(r2, r2, 0x0, 0x200800100000002) 18:52:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0", 0x87, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:58 executing program 1: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendfile(r1, r1, 0x0, 0x200800100000002) 18:52:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c", 0x8c, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:59 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c", 0x8c, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:52:59 executing program 3: r0 = gettid() poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 18:52:59 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:52:59 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:00 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x2, 0x0) 18:53:00 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c", 0x8c, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) 18:53:00 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:00 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5", 0x8e, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 290.399092] audit_printk_skb: 2769 callbacks suppressed [ 290.399101] audit: type=1400 audit(1573843980.838:18963): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.399125] audit: type=1400 audit(1573843980.838:18964): avc: denied { net_admin } for pid=2081 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.400817] audit: type=1400 audit(1573843980.838:18965): avc: denied { net_admin } for pid=2081 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:01 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 290.402449] audit: type=1400 audit(1573843980.838:18966): avc: denied { net_admin } for pid=2081 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.404117] audit: type=1400 audit(1573843980.838:18967): avc: denied { net_admin } for pid=2081 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.407217] audit: type=1400 audit(1573843980.848:18968): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.408946] audit: type=1400 audit(1573843980.848:18969): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.410626] audit: type=1400 audit(1573843980.848:18970): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 290.412325] audit: type=1400 audit(1573843980.848:18971): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:01 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 290.413976] audit: type=1400 audit(1573843980.848:18972): avc: denied { net_admin } for pid=2078 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5", 0x8e, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 290.871460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 290.871506] qtaguid: iface_stat: create6(lo): no inet dev 18:53:01 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5", 0x8e, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:02 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) 18:53:02 executing program 3: r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007080)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000043c0)=[@dstopts={{0x14}}], 0x14}}], 0x1, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000005, r1) 18:53:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed", 0x8f, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:02 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:02 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:02 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed", 0x8f, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:02 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:03 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed", 0x8f, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:03 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x90}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:04 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) 18:53:04 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = socket$inet(0x2, 0x80002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) r4 = dup2(r3, r0) connect$unix(r4, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) fchdir(r2) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./bus\x00', 0x6, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x46800) sync() r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000003340)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000290000000bdeff6effff0000051000000029115b936b96ef6dbf21192814cf0000000b00000004000003f1590ddb387b5e5cdd81"], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000540)={'bcsh0\x00', 0x8671}) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0xcb64e249719a07f0, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./bus\x00', 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000380)={0x3ff, 0x0, 0x80000007, 0xfffffffffffff1a3, 0x0, "c954fa00951c0040838cea87aa78bfe09cdd0d", 0x3, 0xea4}) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)="403ee6bc60d6ec4acc2ada32e61eeaae267bcdae4ca2c25f625d2be1fc911e10fd4b3755f4adc0b08f5a4edbda9dcf012f8f6b6b6b1087e76fa62687ac785f46c06b59bebf24e6a3ce9b7fa615893f3d3515e312eea75354174caf32309e7b82ee8b458b614ef2d53de0910e6321e887b8791a6d06919a6ecf470ff9350c1067d20dfe1ffda6924bff2c5284f9979fce7282c87daef70b04", 0x98) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/33, 0x8) 18:53:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:04 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a500"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:04 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x90}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x90}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:04 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_type(r0, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000400)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000980)='./bus\x00', 0x100, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r7 = fcntl$getown(r6, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) syz_open_procfs(r7, 0x0) unshare(0x4040000000) creat(&(0x7f0000000040)='./file1\x00', 0x0) r8 = eventfd2(0x0, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000000)) fcntl$getown(r8, 0x9) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./bus\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000380)) r11 = socket$inet6(0xa, 0x400000000001, 0x0) close(r11) r12 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x2007fff) sendfile(r11, r12, 0x0, 0x8000fffffffe) r13 = socket$inet6(0xa, 0x400000000001, 0x0) close(r13) r14 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x8) ftruncate(r14, 0x2007fff) sendfile(r13, r14, 0x0, 0x8000fffffffe) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000940)='/dev/loop-control\x00', 0x40, 0x0) fstat(r15, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r9, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x4, r10, r16, 0x442, 0x10000, 0x6, 0x9, 0x3ff, 0x6, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}}, 0xa0) lstat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r10, r17) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r19 = memfd_create(&(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iqv\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x00\x00\x00\x00\x00\x00\x00\xae\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.g\x10H\xa8\xc9\x1f\xfc\x1e\xdfF\x16K\a@\x8c7\x1d!\xfd\xb0\xefW\x8f\xb8\x19\x8dS\xcer\x00SE\xdcD\xd2\x98\fy\x8dQ?7m\x9a\xe3\xca\xb0~\xdb*\xa7\xbf\xeftV\xa1\x94\x911\xa7\x8cYiY\xd2\xecF\xec\xb4/\xca\x97~^o\xd74\x11\'\xe1\xce\x06\xe1\xebV\xfd\xaa\x19\xd3\x14\xad\xea=o\xf2\x15g\xa9\xca\xa7\xc6\xd6\xaa\x86\xcc\x03\xcfD\xfe\x0f\xd4\xa7\x9f\xd8\n\x13T\x83\xdb\x19}\xf1\xa9\xac\x9eV\xb9\x15\x852\xfd\xaea\xff\xcb\x86d:\n\x85\x807]\x96\xb4\x96\xbc\xa6\xe6\x86\x80Gy\xfe\x8c\x1aV\xce\xb2h\xfd\xee*\xf0\xb3\xc38o\xac\x96Y\xa6\x81~\x8e\x8b@k\x7f\x88\xdd<}\x91\x83\xb0[\xff\xe3\xb9\xc6P\xd7\xc9\x87 \xef\xc9M\xa7\xbc\x1c\xa4~\x9b\xee\x94\x02&\x980\x10\x96\x96\\\x00\x00\x00\x00\x00', 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/relabel\x00', 0x2, 0x0) pwritev(r19, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r18, r19, 0x0, 0xffffffffffff7509) sendfile(r18, r19, 0x0, 0x20020102000007) r20 = dup(0xffffffffffffffff) recvfrom$unix(r20, &(0x7f00000009c0)=""/7, 0x7, 0x0, &(0x7f0000000100)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000005c0)={@mcast2, 0x1a, 0x3, 0x2, 0x1, 0x0, 0x80000001}, 0x20) timerfd_gettime(r4, &(0x7f0000000440)) 18:53:05 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a500"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 18:53:05 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 295.417483] audit_printk_skb: 2403 callbacks suppressed [ 295.417493] audit: type=1400 audit(1573843985.858:19774): avc: denied { dac_override } for pid=10827 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 295.425029] audit: type=1400 audit(1573843985.858:19775): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 295.427164] audit: type=1400 audit(1573843985.868:19776): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 295.429222] audit: type=1400 audit(1573843985.868:19777): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 295.431027] audit: type=1400 audit(1573843985.868:19778): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 295.432858] audit: type=1400 audit(1573843985.868:19779): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:06 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) 18:53:06 executing program 1: prctl$PR_SET_UNALIGN(0x6, 0x2) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') r0 = gettid() timer_create(0xb, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb1}, 0x8, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) read(r2, &(0x7f0000000700)=""/250, 0x48f2dc8a) r3 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) read(r1, &(0x7f0000000080)=""/128, 0x88308aa) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) 18:53:06 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 295.434557] audit: type=1400 audit(1573843985.868:19780): avc: denied { net_admin } for pid=2080 comm="syz-executor.4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 295.436539] audit: type=1400 audit(1573843985.878:19781): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:06 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_type(r0, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000400)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000980)='./bus\x00', 0x100, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r7 = fcntl$getown(r6, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) syz_open_procfs(r7, 0x0) unshare(0x4040000000) creat(&(0x7f0000000040)='./file1\x00', 0x0) r8 = eventfd2(0x0, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000000)) fcntl$getown(r8, 0x9) r9 = syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./bus\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000380)) r11 = socket$inet6(0xa, 0x400000000001, 0x0) close(r11) r12 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x2007fff) sendfile(r11, r12, 0x0, 0x8000fffffffe) r13 = socket$inet6(0xa, 0x400000000001, 0x0) close(r13) r14 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x8) ftruncate(r14, 0x2007fff) sendfile(r13, r14, 0x0, 0x8000fffffffe) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000940)='/dev/loop-control\x00', 0x40, 0x0) fstat(r15, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r9, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x4, r10, r16, 0x442, 0x10000, 0x6, 0x9, 0x3ff, 0x6, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}}, 0xa0) lstat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r10, r17) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r19 = memfd_create(&(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iqv\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x00\x00\x00\x00\x00\x00\x00\xae\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.g\x10H\xa8\xc9\x1f\xfc\x1e\xdfF\x16K\a@\x8c7\x1d!\xfd\xb0\xefW\x8f\xb8\x19\x8dS\xcer\x00SE\xdcD\xd2\x98\fy\x8dQ?7m\x9a\xe3\xca\xb0~\xdb*\xa7\xbf\xeftV\xa1\x94\x911\xa7\x8cYiY\xd2\xecF\xec\xb4/\xca\x97~^o\xd74\x11\'\xe1\xce\x06\xe1\xebV\xfd\xaa\x19\xd3\x14\xad\xea=o\xf2\x15g\xa9\xca\xa7\xc6\xd6\xaa\x86\xcc\x03\xcfD\xfe\x0f\xd4\xa7\x9f\xd8\n\x13T\x83\xdb\x19}\xf1\xa9\xac\x9eV\xb9\x15\x852\xfd\xaea\xff\xcb\x86d:\n\x85\x807]\x96\xb4\x96\xbc\xa6\xe6\x86\x80Gy\xfe\x8c\x1aV\xce\xb2h\xfd\xee*\xf0\xb3\xc38o\xac\x96Y\xa6\x81~\x8e\x8b@k\x7f\x88\xdd<}\x91\x83\xb0[\xff\xe3\xb9\xc6P\xd7\xc9\x87 \xef\xc9M\xa7\xbc\x1c\xa4~\x9b\xee\x94\x02&\x980\x10\x96\x96\\\x00\x00\x00\x00\x00', 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/relabel\x00', 0x2, 0x0) pwritev(r19, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r18, r19, 0x0, 0xffffffffffff7509) sendfile(r18, r19, 0x0, 0x20020102000007) r20 = dup(0xffffffffffffffff) recvfrom$unix(r20, &(0x7f00000009c0)=""/7, 0x7, 0x0, &(0x7f0000000100)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000005c0)={@mcast2, 0x1a, 0x3, 0x2, 0x1, 0x0, 0x80000001}, 0x20) timerfd_gettime(r4, &(0x7f0000000440)) [ 295.438208] audit: type=1400 audit(1573843985.878:19782): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:06 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/\x05\x04\x00\xa7\x00', 0x80, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x1f, 0xdd8}) r4 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) setpgid(r4, r5) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r6 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r7) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r7, &(0x7f0000000040), 0x29c}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r9) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r9, &(0x7f0000000040), 0x29c}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r11) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r11, &(0x7f0000000040), 0x29c}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r13) io_setup(0x1ff, &(0x7f00000000c0)=0x0) io_submit(r14, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r13, &(0x7f0000000040), 0x29c}]) openat$zero(0xffffffffffffff9c, &(0x7f0000000980)='/dev/zero\x00', 0x48880, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r15 = socket(0x10, 0x4, 0x0) r16 = fcntl$dupfd(r15, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) mkdirat(r16, 0x0, 0x10) r17 = openat(r16, &(0x7f0000000080)='./file0\x00', 0x80002, 0xa) r18 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r18, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r19, r19, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r19, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r18, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r20}) sendmsg$nl_route_sched(r17, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fb0200002d00000425bd7000ff5bdf250000009a1e75fa1bf35236897c22a600", @ANYRES32=r20, @ANYBLOB="0000feff0300f1ff9876e6ff080005003f01000008000b0007000000"], 0x34}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', r20}) r22 = syz_open_procfs(0x0, &(0x7f0000000340)='net\x00') getdents64(r22, &(0x7f0000001100)=""/142, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x40f00, 0x1, [], r21, 0x10, r22, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0xfa49, 0x7ff}, 0x10}, 0x70) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000840)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="8038054a95550b2401000100b0929f13b50f2bb4073724ab31c438090000ffffff7f003a00900000000000"], 0x0, 0x1c8, 0x0) r23 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r24, &(0x7f0000000a80)) lseek(r6, 0x20000010000, 0x0) sendfile(r6, r23, 0x0, 0xfffffffffffffffc) sendfile(r6, r23, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) [ 295.439895] audit: type=1400 audit(1573843985.878:19783): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:06 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a500"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) r3 = dup3(r2, r0, 0x80000) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000280)=""/179) io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x90, 0x255, 0x0, 0x0, r3}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x23c, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d79}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x168, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x809}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8816}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd80}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81ed}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6a6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2559}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10008085}, 0x44) 18:53:07 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:07 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000120006a0a00fe00947900850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 18:53:07 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:08 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x74, 0xfffffffffffffffb) 18:53:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x300c3, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000000000008"], 0x19) prctl$PR_SET_SECUREBITS(0x1c, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:53:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000009c0)="44f04c97cfc7e5998f920eba1ce576133998d39f2641959b6f55a3d18aeb0656088ca075000000000000000000000061b86c30c8e19e013a19a1240c3772c2749905a47433eb972c1eca9bd115ed111f43196a3b1bc35a3675a95b6b41e3b3386003d359d9f29e9b703ec55345ad91aa8c3701000000d0f46f9aac8d6c4e102390d76e397ad8dfaad8c0a2970e453521f1729111200580ed433bd4fb276df0bb9c400ed9a1d38a197750832d3b10484ae96620b1f6214bc043", 0x7c000000) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r5 = getpid() r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x13, &(0x7f0000000180)) ptrace(0x10, r5) ptrace$poke(0x4209, r5, &(0x7f00000000c0), 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/wireless\x00') ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000580)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r8, 0x400454d1, &(0x7f0000000080)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r8, @ANYRES16, @ANYBLOB="4b10b57c641354715e7ea23fcb16f7dd2246779f16555d983dbd5f23b2218fd64441f01f2589a3d0a89fe8a098f664077715489714c069165181d614f55820b2fdb00bf7a5d479ee27e06f9e518b402323d47d33932b6eab4c7f7b648f495a5aa3b5c9de0fd0c2b72068fc48238c37b8b4157472d5ecda93833cbd043ee0210ed71e0830ed2dd97c7515a1a3c169c804c77e763bdf4a3ff0c483d4a2e2672d8324bf2b6a30bcbefe674bd7687a4bf1bcf8", @ANYRESOCT]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(0x0, &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}], r9}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) 18:53:08 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:08 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7ff, 0x2000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x18, 0xceab1ddcd7ae1a48, "4dd7ce6398be7483f0f73fd6d0116150c59e4923454f2acd04abde976f8a83da16cec122e1e1ab6cd21eaffe8824c7bb9270e4630ce2f21472a2a50275a03c58", "3e3ab7f199af5cf1c6dd1da4e9901bd33a36bf70ccb8ac8cbdf41648da460621", [0x5, 0x6]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:08 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:09 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 298.686649] [ 298.688327] ====================================================== [ 298.694630] [ INFO: possible circular locking dependency detected ] [ 298.701130] 4.9.141+ #23 Not tainted [ 298.704828] ------------------------------------------------------- [ 298.711217] syz-executor.0/10923 is trying to acquire lock: [ 298.716908] (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1e/0x40 [ 298.725971] but task is already holding lock: [ 298.730616] (&lo->lo_ctl_mutex#2){+.+.+.}, at: [] lo_compat_ioctl+0x103/0x140 [ 298.740024] which lock already depends on the new lock. [ 298.740024] [ 298.747013] [ 298.747013] the existing dependency chain (in reverse order) is: [ 298.754610] -> #2 (&lo->lo_ctl_mutex#2){+.+.+.}: [ 298.760162] lock_acquire+0x130/0x3e0 [ 298.764463] mutex_lock_nested+0xc0/0x900 [ 298.769119] lo_release+0x85/0x1a0 [ 298.773161] __blkdev_put+0x636/0x840 [ 298.777458] blkdev_put+0x85/0x560 [ 298.781497] blkdev_close+0x8b/0xb0 [ 298.785622] __fput+0x263/0x700 [ 298.789402] ____fput+0x15/0x20 [ 298.793187] task_work_run+0x10c/0x180 [ 298.797577] exit_to_usermode_loop+0x129/0x150 [ 298.802660] do_syscall_64+0x3e2/0x550 [ 298.807049] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 298.812651] -> #1 (loop_index_mutex){+.+.+.}: [ 298.817819] lock_acquire+0x130/0x3e0 [ 298.822120] mutex_lock_nested+0xc0/0x900 [ 298.826765] lo_open+0x1b/0xa0 [ 298.830459] __blkdev_get+0x263/0xd60 [ 298.834758] blkdev_get+0x2da/0x920 [ 298.838891] blkdev_open+0x1a5/0x250 [ 298.843108] do_dentry_open+0x3ef/0xc90 [ 298.847579] vfs_open+0x11c/0x210 [ 298.851531] path_openat+0x542/0x2790 [ 298.855831] do_filp_open+0x197/0x270 [ 298.860129] do_sys_open+0x30d/0x5c0 [ 298.864342] SyS_open+0x2d/0x40 [ 298.868118] do_syscall_64+0x19f/0x550 [ 298.872503] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 298.878103] -> #0 (&bdev->bd_mutex){+.+.+.}: [ 298.883177] __lock_acquire+0x3189/0x4a10 [ 298.887822] lock_acquire+0x130/0x3e0 [ 298.892120] mutex_lock_nested+0xc0/0x900 [ 298.896766] blkdev_reread_part+0x1e/0x40 [ 298.901411] loop_reread_partitions+0x7c/0x90 [ 298.906408] loop_set_status+0xa7e/0xfe0 [ 298.910965] loop_set_status_compat+0x9a/0xf0 [ 298.915969] lo_compat_ioctl+0x10e/0x140 [ 298.920538] compat_blkdev_ioctl+0x3a4/0x3630 [ 298.925540] compat_SyS_ioctl+0x12d/0x1fd0 [ 298.930272] do_fast_syscall_32+0x2f1/0xa10 [ 298.935093] entry_SYSENTER_compat+0x90/0xa2 [ 298.939994] [ 298.939994] other info that might help us debug this: [ 298.939994] [ 298.948121] Chain exists of: &bdev->bd_mutex --> loop_index_mutex --> &lo->lo_ctl_mutex#2 [ 298.957758] Possible unsafe locking scenario: [ 298.957758] [ 298.963794] CPU0 CPU1 [ 298.968441] ---- ---- [ 298.973083] lock(&lo->lo_ctl_mutex#2); [ 298.977492] lock(loop_index_mutex); [ 298.984045] lock(&lo->lo_ctl_mutex#2); [ 298.990976] lock(&bdev->bd_mutex); [ 298.994914] [ 298.994914] *** DEADLOCK *** [ 298.994914] [ 299.000989] 1 lock held by syz-executor.0/10923: [ 299.005720] #0: (&lo->lo_ctl_mutex#2){+.+.+.}, at: [] lo_compat_ioctl+0x103/0x140 [ 299.015702] [ 299.015702] stack backtrace: [ 299.020186] CPU: 0 PID: 10923 Comm: syz-executor.0 Not tainted 4.9.141+ #23 [ 299.027273] ffff8801c45a7788 ffffffff81b42e79 ffffffff83c8e360 ffffffff83cb3560 [ 299.035282] ffffffff83c8d5e0 ffff8801d31eb850 ffff8801d31eaf80 ffff8801c45a77d0 [ 299.043570] ffffffff813fee40 0000000000000001 00000000d31eb830 0000000000000001 [ 299.051575] Call Trace: [ 299.054145] [] dump_stack+0xc1/0x128 [ 299.059487] [] print_circular_bug.cold.36+0x2f7/0x432 [ 299.066309] [] __lock_acquire+0x3189/0x4a10 [ 299.072258] [] ? kasan_slab_free+0x119/0x190 [ 299.078306] [] ? trace_hardirqs_on+0x10/0x10 [ 299.084348] [] ? __lock_acquire+0x654/0x4a10 [ 299.090386] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 299.097210] [] lock_acquire+0x130/0x3e0 [ 299.102816] [] ? blkdev_reread_part+0x1e/0x40 [ 299.108940] [] ? blkdev_reread_part+0x1e/0x40 [ 299.115070] [] mutex_lock_nested+0xc0/0x900 [ 299.121031] [] ? blkdev_reread_part+0x1e/0x40 [ 299.127164] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 299.133896] [] ? mutex_trylock+0x3e0/0x3e0 [ 299.139757] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 299.146664] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 299.153481] [] blkdev_reread_part+0x1e/0x40 [ 299.159434] [] loop_reread_partitions+0x7c/0x90 [ 299.165733] [] loop_set_status+0xa7e/0xfe0 [ 299.171595] [] loop_set_status_compat+0x9a/0xf0 [ 299.177902] [] ? loop_set_status+0xfe0/0xfe0 [ 299.183937] [] lo_compat_ioctl+0x10e/0x140 [ 299.189808] [] ? lo_ioctl+0x1910/0x1910 [ 299.195413] [] compat_blkdev_ioctl+0x3a4/0x3630 [ 299.201715] [] ? __fget+0x214/0x3d0 [ 299.206970] [] ? cfq_merged_request+0x110/0x110 [ 299.213273] [] ? __fget+0x23b/0x3d0 [ 299.218529] [] ? __fget+0x47/0x3d0 [ 299.223698] [] ? security_file_ioctl+0x8f/0xc0 [ 299.229909] [] ? cfq_merged_request+0x110/0x110 18:53:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') [ 299.236205] [] compat_SyS_ioctl+0x12d/0x1fd0 [ 299.242344] [] ? do_ioctl+0x60/0x60 [ 299.247600] [] do_fast_syscall_32+0x2f1/0xa10 [ 299.253725] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.260371] [] entry_SYSENTER_compat+0x90/0xa2 18:53:09 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)=0x0) getpgrp(r12) 18:53:09 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 299.435532] loop_reread_partitions: partition scan of loop7 (M×Îc˜¾tƒð÷?ÖÐaPÅžI#EO*Í«Þ—oŠƒÚÎÁ"áá«lÒ¯þˆ$Ç»’päc âòr¢¥u <) failed (rc=-13) [ 299.675603] ip6_tunnel: - xmit: Local address not yet configured! 18:53:10 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 18:53:10 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x4) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:10 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:10 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)=0x0) getpgrp(r12) 18:53:10 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0], 0x2}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) 18:53:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') 18:53:10 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0], 0x2}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)="35bf0a3b9daee5fab59be825596d8758a0efd3aadbd3c90c4f7438b5bfe527ecdb65aa82134ec2e8a0ff866efae2c6a25b80713ae82b6d743ef8bf0d54f1e4e42cfda67692781f9cdfaeaea441dade8e548af86c4f74d070a61ae1ca9afd5cd925bf1e49d43f11a4d38cf37d49145c953d82026bd65c23c312b9569df28be931fdff7d", 0x83}, {&(0x7f0000000280)="a4c2910b16971219bbe9daba470a1e97cb164f47d7cc167279db77bf42dea53ec946a3289812160b9353e45b60812f260998a7519be10672ea374588d7abae1e810639485c7f13af6f9ed4ef1ab7546a3dbb8a9e62a8962944cbb5e9f57da6e35d359d8365076b237bf39c211d676855980212a88b77a548a685da9b84d415997dd5662f62dde8623cd31245f6e86c9b31558a055ac3a56453ba1eb3042f4ecc3e36eb52f56587dc353504b836bdf18ce50fe2e4816f5083f86f5029b958b7a1e401229bfea55fe17733eb691c7216d0bfeaee37824cc65dde8d154d2b79b883bc853af048c3886fbb", 0xe9}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000200)="1b5659c2d8b06092a313680faa98210ab449a1941da7f00ca7a7ac973159a1537481b3a081ff33d30837b66e", 0x2c}, {&(0x7f0000000380)="2af156c9741ca9788d61433f2af2f359b130a4f56efa5c959cb3a8e8972fed4336ac4bf7c135d6bab87257ef266ab6ec58edf8de1388225f6cc000a585", 0x3d}], 0x5, 0xffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r4, 0x0, 0x8000fffffffe) readahead(r4, 0xfff, 0x101) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000400)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vga_arbiter\x00', 0x90080, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000700)={'broute\x00'}, &(0x7f0000000780)=0x50) [ 300.426014] audit_printk_skb: 2367 callbacks suppressed [ 300.426023] audit: type=1400 audit(1573843990.868:20573): avc: denied { sys_admin } for pid=10959 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 300.438447] audit: type=1400 audit(1573843990.878:20574): avc: denied { sys_admin } for pid=2079 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:11 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x39f, 0x0) [ 300.446747] audit: type=1400 audit(1573843990.888:20575): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:11 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:11 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) [ 300.448566] audit: type=1400 audit(1573843990.888:20576): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:11 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0], 0x2}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 300.451045] audit: type=1400 audit(1573843990.888:20577): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 300.452814] audit: type=1400 audit(1573843990.888:20578): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 300.454457] audit: type=1400 audit(1573843990.888:20579): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 300.456980] audit: type=1400 audit(1573843990.898:20580): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)) io_setup(0x300, &(0x7f0000000040)=0x0) io_submit(r1, 0x12f, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x104, 0x4, 0x0, 0x2}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 300.458910] audit: type=1400 audit(1573843990.898:20581): avc: denied { net_admin } for pid=2079 comm="syz-executor.1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:11 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)=0x0) getpgrp(r12) [ 300.460564] audit: type=1400 audit(1573843990.898:20582): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 300.465605] ip6_tunnel: - xmit: Local address not yet configured! [ 301.155671] ip6_tunnel: - xmit: Local address not yet configured! 18:53:11 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x4a) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "d72236ae2cf30905", "8f2c03a4962c03c44a575b4a2d041e18", "6103807d", "0f468cb914b409ab"}, 0x28) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 301.445612] ip6_tunnel: - xmit: Local address not yet configured! 18:53:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @broadcast}, &(0x7f0000000080)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trus\xff\xff\xff\xffoverlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) write$P9_RWSTAT(r3, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) 18:53:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') 18:53:12 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:12 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:12 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) 18:53:12 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x9b2cba7ed0679e6d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000280)="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"}, 0x20) io_submit(r2, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:12 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:12 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)=0x0) getpgrp(r12) 18:53:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xcc4b, 0x4) 18:53:12 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:12 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:12 executing program 0: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x80) io_submit(r0, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0xffffffffffffffe9, 0x4}]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:13 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 302.765651] ip6_tunnel: - xmit: Local address not yet configured! 18:53:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') 18:53:13 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)) [ 303.355656] ip6_tunnel: - xmit: Local address not yet configured! [ 303.425611] ip6_tunnel: - xmit: Local address not yet configured! 18:53:13 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) pipe(&(0x7f0000000540)) 18:53:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) pipe(&(0x7f0000000380)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x9c88}, 0x28, 0x0) r4 = dup(r3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0xfffffffe, 0x4) read(r2, &(0x7f0000000700)=""/250, 0x48f2dc8a) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0xf7b1a994b60d2543, @random="268c8236bfe4"}, 0x20, {0x2, 0x4e24, @local}, 'ifb0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:13 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:13 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)) 18:53:14 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:14 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) ioctl$TIOCGSID(r11, 0x5429, &(0x7f0000000540)) 18:53:14 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) listen(r2, 0x10000006) 18:53:14 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 18:53:14 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:14 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x800) 18:53:14 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) getpgrp(0x0) [ 304.325677] ip6_tunnel: - xmit: Local address not yet configured! 18:53:14 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) lseek(r3, 0x20000010000, 0x2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r8 = dup2(r6, r7) write$P9_RREMOVE(r8, 0x0, 0x0) r9 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r10}) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:14 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:14 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) 18:53:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) getpid() r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r3, r4, 0x13, &(0x7f0000000180)) ptrace(0x10, r3) ptrace$poke(0x4209, r3, &(0x7f00000000c0), 0x0) rt_tgsigqueueinfo(r2, r2, 0x15, &(0x7f0000000300)={0x22, 0xfffffffd}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r6 = syz_open_procfs(r2, &(0x7f0000000040)='fdinfo/3\x00') io_submit(r1, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x90, 0x4, 0x0, 0x0, r6}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) getpeername(r9, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x80) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000400)={@loopback, @local, 0x0}, &(0x7f0000000440)=0xc) r12 = socket$inet6(0xa, 0x400000000001, 0x0) close(r12) r13 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r13, 0x2007fff) sendfile(r12, r13, 0x0, 0x8000fffffffe) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r16 = socket$inet6_udp(0xa, 0x2, 0x0) r17 = socket(0x1, 0x2, 0x0) getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r16, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r18, @loopback, @loopback}}}], 0x18}}], 0x2, 0x0) r19 = socket$inet6_udp(0xa, 0x2, 0x0) r20 = socket(0x1, 0x2, 0x0) getsockname$packet(r20, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r19, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r21, @loopback, @loopback}}}], 0x18}}], 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x210290}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x298, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x100, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1989}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0xf6b4, 0x80, 0x5, 0x1}, {0x1, 0xa7, 0x6, 0x8}, {0xfffc, 0x6, 0x1, 0x7}, {0xcf2, 0x4, 0x9, 0x4}, {0x5, 0x8, 0x1, 0x1}, {0x7d6f, 0x5, 0x3}, {0x7f, 0x0, 0x9, 0x20}, {0x7f, 0x7, 0x3, 0x2}, {0x1000, 0x14, 0x1f, 0x48e}, {0x3, 0x9, 0x7f, 0x5}]}}}]}}, {{0x8, 0x1, r11}, {0xb0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}]}}, {{0x8, 0x1, r21}, {0x78, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:53:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r11, &(0x7f0000000340)='threaded\x00', 0x100000078) getpgrp(0x0) 18:53:15 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) socket$inet6(0x10, 0x3, 0x0) 18:53:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) creat(&(0x7f0000000180)='./bus\x00', 0x0) getpgrp(0x0) 18:53:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 18:53:15 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) [ 304.955619] ip6_tunnel: - xmit: Local address not yet configured! 18:53:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:15 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) 18:53:15 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74747536e3d0a5005e00"]) ioctl$BLKPG(r0, 0x1269, 0x0) write(r1, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) write$P9_RLOCK(r5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) lseek(r4, 0x20000010000, 0x2) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000200)='./bus\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x3, 0x2, 0x0, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r8 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r9 = dup2(r7, r8) write$P9_RREMOVE(r9, 0x0, 0x0) r10 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000200)='./bus\x00', r10, &(0x7f00000004c0)='./bus\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xfffffffffffffefe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', r11}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) creat(&(0x7f0000000280)='./bus\x00', 0x0) fchdir(0xffffffffffffffff) 18:53:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 18:53:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64, 0x6}}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) linkat(r6, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00', 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)=@v1={0x0, @aes256, 0xa88c61559dee0c38}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00000010", @ANYRES16=r7, @ANYBLOB="f8002cbd7000fcdbdf251500000044000908080002000000000008000100004ad0e100bae7f4ea490ebef0817800000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='security.capability\x00', &(0x7f0000000980)=@v3={0x3000000, [{0xffffffff, 0x8}, {0x8}], r8}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/enforce\x00', 0x8001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffd29) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x4) fcntl$setstatus(r10, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f) creat(&(0x7f0000000180)='./bus\x00', 0x0) getpgrp(0x0) [ 305.449156] audit_printk_skb: 4389 callbacks suppressed [ 305.449163] audit: type=1400 audit(1573843995.888:22046): avc: denied { sys_admin } for pid=2080 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 305.474713] audit: type=1400 audit(1573843995.908:22047): avc: denied { dac_override } for pid=11181 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 305.477050] audit: type=1400 audit(1573843995.918:22048): avc: denied { dac_override } for pid=11181 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 305.480858] audit: type=1400 audit(1573843995.918:22049): avc: denied { dac_override } for pid=11181 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 305.553398] audit: type=1400 audit(1573843995.988:22050): avc: denied { dac_override } for pid=11179 comm="syz-executor.3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x36a, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="a7528650ae2933bc90a2a8ffb8d8ac71267d048fed22c5a07bfec6069d0409000000132899e73c508ff5fa4f07803f9a4de4213dc753ae8f2524bab280b6b92109888204e718838a5a517298c629f7eac993d3389369c8e2f0054c0c29ba60d76067f8c64f24c61ee781855d1348e170b3f75c438a27225840d9af90788fe73d7b1ad8034015f0528877cc0c82f5ed80", 0x1, 0x4}]) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 18:53:16 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) 18:53:16 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba0000000001000700f7ffffff", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000000"], 0x3}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) [ 305.561046] audit: type=1400 audit(1573843995.998:22051): avc: denied { create } for pid=11179 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 305.562258] audit: type=1400 audit(1573843995.998:22052): avc: denied { write } for pid=11179 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 18:53:16 executing program 5: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) [ 305.585863] audit: type=1400 audit(1573843996.018:22053): avc: denied { dac_override } for pid=11181 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 305.595153] audit: type=1400 audit(1573843996.028:22054): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 305.596202] audit: type=1400 audit(1573843996.038:22055): avc: denied { sys_admin } for pid=2078 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:53:16 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff14000000800008000800040001000000", 0x34c) 18:53:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x10a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffffffffffffc7) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) io_setup(0x4f3, &(0x7f0000000580)) fcntl$setlease(r0, 0x400, 0x4) syz_open_procfs(0x0, 0x0) unshare(0x4042020200) r8 = creat(&(0x7f0000000400)='./bus\x00', 0xf) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[@ANYRESHEX=r8], 0x0, 0x0, 0x1000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0xfffffef6) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r7, 0x8, r6) io_setup(0x800, &(0x7f00000004c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r9, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 18:53:16 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x64,