4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="cachefiles" dev="sda1" ino=16757 res=0
00:12:19 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha256-avx\x00'}})
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r2, 0x40, 0xfa}, &(0x7f0000000040)=ANY=[@ANYBLOB='enc=raw hash=blake2s-160-generic\x00'/77], &(0x7f00000000c0)="a998ce648167db197c5bb23700ae3649833f5ff42a1bfd7c1defbda3ae9313cb51a41088062aa7496548e80cfedaa37ad59170df6d8d0e433d9b9f27e1caa654", &(0x7f0000000180)=""/250)
r3 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x6)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:19 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1f5)

00:12:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x4, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:19 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xf0, 0x0)

00:12:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6200, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:19 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:19 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r0, 0x80047437, 0x20000000)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x7fffffff, 0x9, 0x1})

00:12:20 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1f6)

00:12:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x5, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:20 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x300, 0x0)

00:12:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6201, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6202, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:20 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x50, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0xc040)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

[ 3139.977593] audit: type=1804 audit(1592179940.183:1748): pid=7602 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x6, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6203, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x7, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:20 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1f7)

00:12:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6300, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:20 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x600, 0x0)

00:12:20 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setuid(r1)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r2, &(0x7f0000000000))

00:12:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x9, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6301, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:21 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x3f00, 0x0)

00:12:21 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xb, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3140.924437] audit: type=1804 audit(1592179941.123:1749): pid=7670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6302, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:21 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1f8)

00:12:21 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xf, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6303, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3141.725454] audit: type=1804 audit(1592179941.933:1750): pid=7706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3142.473366] audit: type=1804 audit(1592179942.683:1751): pid=7706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:24 executing program 5:
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080))
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4100, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x80, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:24 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0)

00:12:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x2c, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6400, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:24 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1f9)

00:12:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6401, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3143.893838] audit: type=1804 audit(1592179944.103:1752): pid=7722 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:24 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xf000, 0x0)

00:12:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x33, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:24 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)

00:12:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6402, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6403, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x3a, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:24 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7, 0x301000)

00:12:24 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1fa)

00:12:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6500, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x5c, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:24 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeff, 0x0)

00:12:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3144.748660] audit: type=1804 audit(1592179944.953:1753): pid=7787 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:25 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x20000000800, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
accept4$bt_l2cap(r3, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x8}}, 0x18)
write$P9_RLERRORu(r1, &(0x7f0000000000)={0xf, 0x7, 0x1, {{0x2, '#\x8d'}, 0x101}}, 0xf)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6501, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x70, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:25 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x2842449, &(0x7f0000000180)={[{@index_off='index=off'}, {@xino_auto='xino=auto'}, {@metacopy_on='metacopy=on'}, {@metacopy_off='metacopy=off'}, {@metacopy_off='metacopy=off'}, {@nfs_export_on='nfs_export=on'}, {@xino_off='xino=off'}, {@metacopy_off='metacopy=off'}], [{@subj_role={'subj_role', 0x3d, '}^.'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, '\'::&#-[&\\'}}, {@seclabel='seclabel'}]})

00:12:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6502, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3145.494170] audit: type=1804 audit(1592179945.703:1754): pid=7787 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:25 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1fb)

00:12:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xe0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6503, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:25 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4)

00:12:25 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfffe, 0x0)

00:12:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6600, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3145.740279] audit: type=1804 audit(1592179945.943:1755): pid=7846 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:26 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_buf(r1, 0x0, 0x2, &(0x7f0000000000)=""/189, &(0x7f00000000c0)=0xbd)

00:12:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xfc, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6601, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:26 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1fc)

00:12:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x300, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6602, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:26 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x6b6b6b, 0x0)

00:12:26 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3146.627333] audit: type=1804 audit(1592179946.813:1756): pid=7888 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6603, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:26 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xf0ffff, 0x0)

00:12:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x500, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3146.700810] audit: type=1804 audit(1592179946.883:1757): pid=7888 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:26 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1fd)

00:12:27 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={<r3=>r0})
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20000840)
accept$packet(r1, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000009c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8, 0x9, 0x3d5, 0x400, 0x10000, 0x20200040, r4})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet(r1, 0x0, 0x0)

00:12:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6700, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:27 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3146.888924] audit: type=1804 audit(1592179947.093:1758): pid=7917 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x600, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:27 executing program 5:
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x7a, 0x18b)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6701, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:27 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x700, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6702, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:27 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeffff, 0x0)

00:12:27 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = inotify_init()
fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, "2b5f54d17fac2a"}, 0x8, 0x3)
r1 = socket$inet6(0xa, 0x3, 0x80)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000440)=0x6e)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

[ 3147.689434] audit: type=1804 audit(1592179947.893:1759): pid=7961 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3147.718959] x_tables: ip6_tables: REJECT target: only valid in filter table, not 

00:12:27 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1fe)

00:12:27 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6703, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x900, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:28 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6800, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3147.930260] audit: type=1804 audit(1592179948.133:1760): pid=7980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:28 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x1000000, 0x0)

00:12:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xb00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:28 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x201)

[ 3148.024075] audit: type=1804 audit(1592179948.193:1761): pid=7988 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x4, 0x80, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6801, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xf00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3148.227778] audit: type=1804 audit(1592179948.433:1762): pid=8007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6802, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x2c00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6803, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:28 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x2000000, 0x0)

00:12:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x3300, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3148.969745] audit: type=1804 audit(1592179949.173:1763): pid=8053 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:29 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x202)

00:12:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6900, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:29 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x3000000, 0x0)

00:12:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x3a00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:29 executing program 5:
r0 = perf_event_open(&(0x7f0000001680)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000021c0)={0x3, 0x6, 0x4, 0x10, 0x1, {}, {0x4, 0x8, 0x81, 0x7, 0xf8, 0xd, "0c6e6804"}, 0xfff, 0x4, @planes=&(0x7f0000002180)={0x4, 0x64, @userptr=0x20, 0x21d80711}, 0x5, 0x0, <r6=>r5})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r7, 0x80047437, 0x20000000)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r8, 0x80047437, 0x20000000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="4dad3f88ff3048c3c50515637d144d51e808f46a52f7305261f725d65ea17eea92974b11b6d78d2036e91888a8259aea1a2164f33ba83b9f0edc996228db8bab9285e9509e195c7738dc78315d312b301d7dc4cb4b4a423bd5abeccdeeb5484e05dd209b62864422b1740ba2ae730d4ded9908eb516f9fb927021cc66fe6d0e793e0687d0d04006a49e91f1724320dc5e1d2c992c8ea921199e58205c1ce4de58ad33031f467310d36b0adc3315e5b9ba58da684c7cb017c82", 0xb9}, {0xffffffffffffffff}, {&(0x7f0000000240)="691c272a166dd349395a3caf3228eec52f750fd47bd581a96404126bd9b0f82f18997556fd94d5dee42e0d434bb6c9df2251d0b4b410b812d1528f91317cb481d9671b6ce779fec6a164f5d8782ab8fbb079f7457f3cf99ff2164ef8291b9cb90882be2a4a38f8549ec0d6159fa72e648aea7e30493a66ce238a6661bfd7372e0a727538991d469a212b8c413bac952d93182d44aee845ee3b3d7e3f246a3285d5e7500801e1ba5e", 0xa8}], 0x3, 0x0, 0x0, 0x20000040}, {&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000003c0)="36a5f56febc4c9788487952fe982df9469a156d6f9315d48ed824b264f6d4cfcd2c37c6a4b1d58d3e8577c6b93e94e969a461d21d248c069a31f4472abdfafe66ff24a49f834c3dae19f8abfbd12cdeb1e42d014acb3cfff55ac28e189817c513f6a336496f5de65026d6180b5006fbb81f2977e2201400c81c75f206825e268a0f37ee109fabf23f50fba1ed824fe5d7cb4a1b1c8876433acba8a5489f1da5e2952400f446c08d174f25708cd969ff2c3d3cd5ad537092a3e75724a7e24b9b54188c1ef3230e8680d31009a62120e4dab112a2d3be8e7e0c66cccae198eb1014294a2a27f7fd6beef447354d8ebb10f65781eb396fa33fd9abf7374630b11f0392d368787f58bb710a954ccab833d1a99cf081d4a776f5cfe6ed7334846f91771e1d2b40724617ac5b24e977091a821a8be906b20946b5db109f2dff1d70b000ba5e8cb94df95ae03ab0a96e14a99d6e88bb9b930c91c57bb491c98c3be7c16d53d59f546b979b1d21f3ef0cc1b931637c170f533e4db6939339e55e8e70ea56b2eb5c8dc7e9ce59a274c26ec69a264f07e96898a7216e74e0b7d8d67117e3b0caedc8f77f8fc7407278f0bfdeef5edc90202383e5c057e2871862de7b2c4ad350e8a9639f789d9dff3852a5c50774946730575700b9704d5f5aaff6004760326233be329ec61de2645a9c64d0ba4fff96caf3e5b880195e93a7c6ca877ac8824041f4c1720e5b12ee3f9da4286957851f8046eb6926800f0aac79b66ccaec95bd57b9e4bde8f9ca0ad561d2284837857954c0539dc0cb183c69308f51dfffa6afcb30cb48b96dfbf6e9471d0ab2720aee908436c32cfdb0f94ae5233ed07cf7cddfaa47df941a0de5079051ba352e5b82b135327a30166331d458e5d181865d9b32cbb128bb7c4c1b69e323e367da8ec894f88109de73f04de99f7069b5011573bc88ebd4d4df886d9cb3b9f34fd9c7dddc2884247f852212f09198d7a403558fc67992e1dc107ec89f23b2d566d469fcc8dac9779040aa13e13ed4f3fb8183cc5550e6f302f8d148f1382235f61f3b7c8d5046a8e1f0e98b09a33b72869cd52397bf3ab6359768740434a0248696f5bf15ef583204b2326a02d78fffc3cd70113e7379f9efa7531f14429ad751a5ada8603b78632bf55096d5b70abd385c60cfa37cc85109bfbf6f71a6cf4a72c647288af4a06e789309f33e3f77ce29b604ee5718f39f8eae084646059d57007a19e84fb451bed55400eb684c14b14bac4c78bdf1b77881ec61981b5b620053ac0246a1e4d4f7ee968cdb49590094a36884ed454e468a64beaeb0f757b429f71389c10f4f857daa50842a2728ff91c4bd2dad7d30842bcf8ca71601fd635219077f7c8f29b7d0987fa3b8adfda223cfcd87455956a2b335f9e32ed650057f1a4a997d24edf8186177e99911c7b94a29a6ea194574dfc6702273628bc9721ad1533d05472ba4fb0e281e70d6d2afcc7f59f7ee58798ed0dfa2a17accb8ac87646834b0789584236a2cf6bdbf0a52e2478417e16692ca4e810e59bb233a97c50d37e32bc39925487a584367364c3e3a02f516992d4c76bec98b814980e257e115bec5952532722a1f8db8a4cffc726843963761a224623aa8af5ed65d3a645cf8d1259149018f7833aa28dad8aabd41fffa4bdd876d2d9e65ea8d76125663b316ae5725718c11638815b7e9961a8684a6fed1696b472f1997a8359bba88d324c0204feee2afaac43222be7b7ee7dee4d876a2b2484042735cd48b0d9bd1e11a0e5e861c4dda5071273637dcbe56b9ba702fbe45f610c2dce7f9e5865ccbcaf923f174b641d9a94f4b924573f414a1261e26e3037eea0d811b8ce0bd9499b81690e946b0b921e11f2179b692a991ac9818e8248a116f98972c4b65f7e5e14048f173009531ad4bac3f6a89635e5ead2e61d25b7aeafe4f6aefd2cc479bd670b4d108b42c88858e8b610bf5941110d22bbe95d00418af3c51c172acccf75ad3c41de14e979d2a978e200936249d67f7aca95990c90e01529937f3199a8197e520184722c6c237dba6316fddcba59a149d692b9cae3e752b9001806c0dff3371970eb0e7211dccf5f46d98939de7df4a2ed10ca8fde09a283cb0a3cad9d6d0e82290dabd44a71d483109e9afd466ac768482833bdb6a9464b53fd5f72f246270b0de09f0bd957b9e6d2d7c140cbf4c6d9fb6419ef1e6d5f568dbe2b847616766ba3d9d93622d36ba95f0cf359ebb36bd77d4282ea0076bd5271904989ce2bf00c6d2a255596819780a0f05e487bfaf2b69efdb9c461a1173bbdeb2cd153cd0698e819ee7a2968ff95d930e43932a3b92e01ec8f70c9607566e2e0276b24cbd983683e35648999cd2a67ec8205bd74a3d2b5825c2a52a5769188c89b4596f252cf4e49c8554523359cce17b5a4fd6bfd1f8252ed0501348e69521b2a95eae0d8b3a4c3eb0c1e0a09f4b2dba352bfa61abb52d361289457ff7aea3cc7ee0d85c2c330ff6ade20f70126bd6d97e93748412e82cdca844b1c4abae1b975fc22aca6f8d32d9a8bd677bf7ecdae7cf9d39baf727afbf636c04b49536056307de8592612dbff630819181aa379b9a6e272f404c4f30d04feba27faa076a8bccd1709c50bbc66a447c7a67dd0c6d40e156e3ac6980f680f85b7a2af65ff3f49c31538a984f5b6491ee1fb360bf4e1426c129ddf687a564a2668ca40104da83bbd83cd24233c96589b03e872677d7e4a52043f955b12eb86d67a82223fee1e4b0164d17933eae58cb045275f3a87315ed12a81c538ed730176052919e39afadc2e6264774b300d94b58d5a1c447a12756ca6f703939d01c42c9611cf250bdca872c86de25b9a67bcdafb3dcfe27b7d9f10c48c008d59c90cfbbf362094a5ef073f03b69a42b2f5fa37a7c9d7aed1de963055c4f57c8b8cf77e722831c096d36e5ced0bb41f5d886d081290ab902ce9900ffaddfc1423a68f4111bc9ce5adb566434f81762dd29ee24e6f8faa0b3e11a50238de720d34f0245af10df1d0ce2547015c9545d379ae74e8dd7089823dc17f14b7db12a5e90fa6678b4151c3ca1f65b98289098341548c6cf9d373a01c41022671eea5a265bf805811c13be3f8c707187df54b038538411d571202c3304c66c7fb57871730a3aaed525c621d25b302b19e3119ad52dbee2bdf04bff3137e340fd21c937837c07e5e1602c1ff25a17d9a38807b6cd1d2664dc6633b37128ee265e76c3f98def7910f8072ce58aa17c23503165b4ed6221f511ef4d3eeac5b9405ab00d61c949ffafc6c353229c9fc7480112e779a40769816887b1ce39c3a252e0207c607f3bfb1015f110a95ccf4d89d94bca02c138d85b03813e25952449e9d8b90aff9fb9d232e6bba498bc4b40dc7afded7463acf7cfad2b18cbf7f4b1f1b9c0b08c0ce70e5343426c3e9d86e3e686ddeeeeea54c17bf80a5e4cb7c7002d8ad874efc9046524794f374ea48d90f193036fa6209090748ff8e9202b806dd7553448e5b6b95bef8c00678020279107b00a5dc7dce7ac18be9886857fe6720154f7e9994049c0156f520150c9b4f3bb7dcf73fd00f8f5b8147886a3f7d6ff482d9cedc8e5758a8e1d0e9a22a565d8f4636609f297d6ba8d736dfac568909e8edb7c84f48c2d799257b38d76de8898af66a224b062a29558757887aad3b3f681b7814c1149c04a32f2758a128bf45adee9be563606eaf99ac3f2ff386136c049d2a954afaf6208844e758a888495a84a15426d362eef6d4caf742681b6a5ae5638ba55a62d3324dee2304712392eea70c26512b65493c78f7c4e0b6f0d3697d384569f21294358e297c1c8a9180e2b4515a24b5209b7395c2d73efeb3fbeddc47f7a2432f532e64f855f05f6027ff08390b9917080ae07d9b694988b5c3828dc757124ac58c74e14dcc3a4b32776421a29e5901dbe89109fb2a68c1324e9d76ada6829aa4908fe86d43836c62068588717725d161c7997600f3d3acd377bd258b9ebe78d0cc2758fa3499fcd20a8cbb861ed076a124b002792a3a2bebeb1d985d12fd9b83c7a8886b8a18879f4eb9d9a19cf48093e602526a926390b3b6a1aa945adb7d425700bf191f0e889e9dd5a208b486e3211c1571a739ba4754e4dd5f2fa22a436802e9f241002a6c3217dedbf69103409bd86c48d66a3fe70e5db81daa13ec581e24fb3dd809cf7683e5ac0712f4e695069f19e5c63c5e76ddd61f8040e20a1db0bdbfa1017c20cac36709b58c25cee97efecf2937a9e2afdfac471aa545135ae678ef14b2c12d33612301ebfba64500f012a43462f2b106c7a3793dce29ec5692223bd99dee9e53090c5db7a6e3a1e4a3ae98d7e7fcd5852469e4fbdcb506803cf7859136076bd5af4c873925307a3b474a8eb342829cf0fb3a2aa10a04b8647a3d2606f8993f47c63a27d4755452ceaa13222acff4f557050f423bb26f7883d8ec8fe32253358ee61146e8e1f5fa04fbad00d7f6f9cb6412a785c359d103cfa5f8b53aeddf112830dd6ed3c952ee316d9158714ac97ad7a87280f9540b5318dca07c9b702e0b67a7530aa6b98f774dc7cebea87d07fd5589efe94931a73fe18b26285ecc1fe5e6bf375bc0d466b56d0ca692899843e53c341e4d6d41318031bcb04cbd4c3b1b0542ce535340f67179a322f0e6d892771e06caa139316498579425a0cdb07f7d4286aa57ca98f2de0df205b8fdb0dced514ff7e8a4ae4927d037d213902dd85b35ad23711d0775cd0e8a1c7521fb8090219832d94e90377b40c8bc2cdb807ccece67605bcc406406944d0c472130605b729564b0d47af7eef75e3afc8f6d5260575e8a98b4b3d840da4b71628fd6f5ff0805a336d186a06dcad12206fa0b90f69d6f9e620ce12947a5f355fb2f65280bfc144d76cce6c7ed71f81619c4fb62511925614b2296498ce6ffdef2e62ed3bebf1d49fe9f01940db9a5c78ed8c78b8f9bf25f91f2fdb78a60fda198cf97876639ca9c978a63feaa1d6ff599d389c2b0185413f943ff45711b0a28f822278b232a62faebfe672d4f8f9e9e60c9f0a708fb03b2d2b32e18fa9ff7ae0b670a0ff65b19a52a97ada30f8fcbb1a7b97ad1a6b1b958ad74c97d32a5cf06fb4a3a0f883be2f43e16631acfb3867a3127e228b3f145991dd4f5d6386c526cf18fce31829571e19e29f62dba98b688e5e410cfb3647ef21b57b81bdc92a5f611e48b42d885c142857469ba587dd1d103999642caaf548cdc5c0200dcb51560d6487da780f2d899406d119a8ec2e31a5cf4c8a46fd1363b22eb20389598841a40e9b8f1ba5629689dfe910ecc65d38ec214396361a5d16432e094fb990867a59e85d292f0a1437722eac301863059b3dc86afa8b09717397060dc512f18afc766e39d0499588ad40d4e4f535d4dbb86c4695033f3ca7e6da1a58ede7a165e5c47ddd0edfc92eaecfc045b6df985c6200cd886eff6b6937466fefe62101b355d3a3ffd600ddbcf06c6eea649afef561bc447865614cb0a35477e0dd49473d6776109ba5a46babce6d34f398e2ecd91f33aa20e4c74093fc9ab361cd53aac9d6e8695c0fe21025c6697caa0dfec1465b9873fbde77885a832608de937c8e39a46f2fe19276463e12edb6d947d40a471423c56c54b76e852336680d1172edbce2a3b8d5423170536e7109ce20f2ff3d280aaae3c194818e1c11c50d6d1e818d7351e980a396c67490835b88102c66a2b6d9faa15c8306040a58303140ba67a8655e241aebaa5c4e48d055628cac2282ec88b62", 0x1000}], 0x1, 0x0, 0x0, 0x4850}, {&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001480)="6089eff17bdff9bbe6cdf7265eefa460ed29c1522afec9fda9807f11cf31c402ad7961efc94ac6331765b9184f3debd3a98177c6f533aeab5c643212374051b1c255496d8e990167332d267b9d5a44b104a78daf696159d92c64065d4428016667afda5b0adb6048d3", 0x69}, {&(0x7f0000001500)="6003c24f45235a79e649c3a7b9ea4f5ecb6dd527cd18a9fdff03", 0x1a}, {&(0x7f0000001580)="8a578a3cb188e60a7be1c03f0ae117d36aa0baa4a7b3a7e16a710094599105003d8db4a384a5f270be0a31dab4a1cfebc98390d7971c1375a1195d7aadd97a11180e6ec0210fb29b6c09d820616f09ccdeacd7366d1bfa3208ef097b81d26947a2fe363fe5ba9198c9bd524233f5bae41359729a1d2c3f5663113f688be92e3b86d157c798839e61566e41ba78308f66e1b5f4f7fe6657c69d0cd9adb1ef9662fdd9bdfa32a6749f21054bbda11daf4b9716018ef35da24e4b27c32e81db9975", 0xc0}], 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="14000000000000cb2883e9a3f48e64006c7fd0e1cb77f77b8111854a1df05a8bbdcb5bfdd62459d43069d75a0d59cfce8f659862c183279c378b811328a75cc8d7552c780c31f6fe3393769bdc3bbbcae5531ed36f50edfbba8e7e8a050ce86f19ec6cb212246d", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r8], 0x98, 0xc861}, {&(0x7f0000001b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="a556c6b8f8138fdecf9ee54e5595bf3d0a14ca0d92b6a28c946d0faeae92275146851bdd1027d9fa8440918aa6c336de9d63a49e31e053c1acb582de734ba441d1c902cef5230cf0b64bb723fa039826466a", 0x52}], 0x1, &(0x7f0000001f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0xf8, 0x40408d4}, {&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002100)="3976cd87d4d12c6e89d1e6b22611b043c7b2cf8e", 0x14}], 0x1, &(0x7f0000002240)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r6, r7, r8]}}], 0x30, 0x60004891}, {&(0x7f0000002280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002300)="ab4189f3a0093a35d6e803036a59f568bc3d41a7ef3a9ab83a9f74d6d999a449a0be2e482bb33ed45f285853db3ccde0e9447193aa762598044186e65bced7bc6ebb247b1295e475956d91711bea812527200051", 0x54}], 0x1, 0x0, 0x0, 0x4008000}], 0x6, 0x4000000)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x1d62, 0x4)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6901, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x3f00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3149.221224] audit: type=1804 audit(1592179949.423:1764): pid=8071 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6902, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:29 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec09, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x80c5)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r4}}, 0x20}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}}, 0x488c6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x5)

00:12:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3149.773607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3150.013020] audit: type=1804 audit(1592179950.223:1765): pid=8110 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:30 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x203)

00:12:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6903, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:30 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x4000000, 0x0)

00:12:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x5c00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6a00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3150.156760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
00:12:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x7000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:30 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x6000000, 0x0)

[ 3150.298294] audit: type=1804 audit(1592179950.503:1766): pid=8127 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6a01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:30 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000440))
r2 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0xfffffff8, 0x4)

00:12:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x7f00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3150.659784] x_tables: ip6_tables: REJECT target: only valid in filter table, not øÿÿÿer
[ 3151.023839] audit: type=1804 audit(1592179951.233:1767): pid=8168 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:31 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x204)

00:12:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6a02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x80fe, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:31 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x0, 0xfb, "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"})

00:12:31 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x3f000000, 0x0)

00:12:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6a03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xc0fe, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3151.320182] audit: type=1804 audit(1592179951.513:1768): pid=8188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:31 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x40000000, 0x0)

00:12:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6b00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:32 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x205)

00:12:32 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r2, 0x80047437, 0x20000000)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x9d0000, 0x81, 0x1, <r3=>r2, 0x0, &(0x7f0000000000)={0x9b0961, 0x6, [], @value=0x3}})
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(0xffffffffffffffff, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
sendmsg$nl_generic(r3, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="b0100000300000022bbd7000fddbdf251600000005008c00000000000c0039000900000000000000881022802fd835f204f6a008199a1d864421390c7ae0529505c26968dc3dca3389e68b65ebd0c1c156224fbac76473f165d41f5c10032f83da5a82a61a274ba68a9512640db23fb3e22d50d3c22d7358317a33d3c7370d077c010b2ad01517887f7a75cefd8397cc32babae77d8feebc3b28abf65a78871d310d1f6629779f94cb2334640448258263e140b6cb7d544e551baf821fd7db44a1e409b64e7668b374f2365fe0b3280f8f14dfc716cdadbbe6cb0ed182d8e9c31112b94cb11c8ed9f1a7b085f0d4c9a0367c589dd2ef0d027f31a2e034571bd7fa5ed0444a39679972aeae7f0b13900a9492f0cda4a696c6d2afa0092ae6818dd49453773bb572453e9bc582e272f40f41a8290b60722de6214f114eaab69f64c14d1e857ba411143eb8874700c6669d0626430041dc703230791f221e5dbb55c0ba62c0802e555c19eac51fe655115e41d52924f3c63696dec14b82f0e84122281c868f6f6ddf8c2583e20a6b92a7b48e7476c3fcfd53b39c63fc0cacb2fa902ea3e33e633e8a08f49a6a5a565dd850123f3ed190185f8da2cf59699df96955b4c401b01fefb4cb898d04278849a515b42a0e65311d41095435aa3bfc6f68c34d21a2c517460bd75323bdcd28a1fada7cb8123cedeb8bdbc496c0f4bd8ff8e5f7c7d16af99dccacb660067f2ac3fecf71423a30c30282fd570a7515e7b0abbb516f313bc15fe6f1bfeee22ba2a503d4f760dc73511e80a355b25de7ddc71b798f24a3383ee60a3639045254d2c220f0d89fcb5ce18999f1df122fd8a2a565e63e89dbab62a4fc4c865ad916ac3a2f065f8408678769a2e4ded6a5465638cda6725ec311bdc31ba2b4d2f77a5a25db4518c8259f2a8cf323ae5f8f5debbd27ad76f8dc5300c630dc9928c8e7dd6d7450b27d5eaaa2d62ff0dd13f77a5d85e1b3aa94e559f8dbbfe922b433671bddac4b820497c4dd9247e546bc60cb5f95502116bf54de7a48a5c084c904a8be943b9b7e0808205505024600ff191845afbe2ce79c1f3cb48d7f57fef9fbc53ce3125bc6387e9de74eec21c866e326570607a0b47bf889a62cb5f7ef8d6a55c910bf3bcf303648086e1acdbccdbf65038b6815e7b0ac8e8fe0f8714b05374ebca76751f5e7c275284ce98968dce587abed9a1b4fa8e3159549230b9f8d913aeb33aff9792f577f51f86acefc276403fd2ec7039bb3fc441df9afe180a45988b84a470f4e9b6a2383ebaa3df2c621a231fa8a9c93364ea1443ba131dc36a68f24525b2dd4baf81d3070f96156b94ae64499c3340b143dded8f73349dba233ddd06ee42388d3b9d9202f729dab6e37244f5cffd56809940731bd1f6d6828c7cb5e0649df968c8350dccdfc422480d6b05bb924693f61466b5ee00ef7e16a5a6f751effd06b266db055141a2126586299bea538c61fc8e89d8c9b1a75aecc8d6b70fc1bbbcac3e129a6e7350a2c9ac966c432d30d5c72f64e8e13466ef07a9ae706fe65e5cdf9ed99791bbbbc080bfaf5ddb48c5e19c751bb12f4f8a0ea6f5b0f4aa9bd0c5d89d9a61817467a1614a379eb97ee0069ab6a19df38ea29bcde5206a90003bf6378264e629d9c0593dd8c374fd4c4d633f1d4a80a8e21e342441af36552ea623c5e922f2ade2d80440b0e493589399ab7af655bc22cbd80bc2fcff721739f23b8147cc5477bdc112081e989169e1556814be4779d3cd2266fa3e9924a2aa2189d8ea9be9424e0cdccf886b38986b3c0d772e083170daa966bec67b31dcf0ad6e79d0ce9428ed1ec0ad8e5b7f556d1a9655180668c14fd3dd65abf7e766bf1bbcab78cc530d38161310f98ed00c01e317b1ea25b724ca8b9d4304388fb00cd511665924b54905a476e0992e097c52b4d81ed35a126f973b9b604d036d8f01053969764390aff15c006cd95b2165149718756137fd2ce0f3608806a6d89abd2be319ff37388fa05a6f67c4356911215ea6f0f06b62e5b0fe70bca2b48deb625b9bef566fcf4f4178abf27cbc5e1ff6d390b1f7327794deacd0ed646f97de483b2c90f2fb7532cfab9a72033cc26e9773bd6b55899bff75c5cb57909a1d45dad63f2eb6f68624779c4ed91451a8cd4c7354eec2fedfa3556bd037388aa05e4b4877bd09010f3116f004fb6d3ab4de00415eb247be4e076d7ac8f3eb6b626da795a7d1e2ba096feb1a9ab0e7e0fda76405ac55fbfbe824f41ea89f9dbf6f34aa0b4befe6f7e296e8ecc39aae09e41206a0cb35cd1f12c63883bb2c87907fe96969774ef9e8ab5411b9a11189e8fdc11b6301b7f34f0d52574c48d933805af310d1334687fb96708d83bd0d1e72f9f5db92e3027ee8187cf69f52191644955f7f7e3e45ca980d2ea1818f305bf09fd6b153f8110b179f1ed9402f91b37166e9e0bcac3e4c58c3fbfc800e2b15031906ce5ec5d33280fef3e55b797fa27dccc29a8dab3fd03bb375cfcf03941b158759834e155c6947af6842abc090785aa6c77370393e11c5acc27b59bc812bcbd333e7e6b37e02b523cb1912b2f1eadf41fec03bd2a68eac360bd87f82d78c7cc553c30fba56295c8dc6925214c94a0c93a7d8edee86e1d53e2631d0de210ac647da70a77269e81868cd304fab9a15efe6e4cf751a9bf451480fd4f921498806e5ecf40fbe8f5562a9fb37ef2f4d09615fbcecd81e7a84464c45686a6d4258138c6cd628932d6c4f20610c1ad6c1359e22f6cafcf94c2734212e116d8ffb371fb0f814579d119fecf7945a3ce1dc43c98f90dbeacd6e549bc7806ae9acf8fce4d68b8109220d663985a4ff5d0814c1fd9dd632a168c51a6b00af5e44c34db51b9eee21418eabab33216464407ba658a900f9b52f3d6bcc3896e0e0eeae4d5cd66a9d9b14223070995a7b6f4c4710f0c3aa1b7f1477a67977f7f376a384c62ebd4dd9627da728201aabbbd193d72371a9b2a039f23e715caf80f562d13b292af2d9d02b2ddcb185c1888392021806bbab149312f8547b7af7597fbd354b08c4cabde7262e27625a4268a58a9dfd0ca4ea748d829be1a1495ed29505d2a0073e0718c3c2992e0a766c7b40541109faf1c758266812088a155ed6195ddfb574db29a039979622c65b49fa59a1dc9a078bb6f91a518ba696fa4b31194dfb5e7bb5418a9b03eda2b0bd61fe1edcb3b2e08947d7f75cc44fba090cba0338bc6a1687bbe3796925a3e7ad22d7f73eb06dd9825a6b0e6c6f875943a851c2f5f370c7a6f87fb25dad3038736b477021007061ceb3c04b5a47426e994495470b6d776c1419ca687a44f7ba37787bdd4ef0133733fb7fd8671dbd7763e3906b7ad537f239090345fe4f5ea7b8fc17c3a13371a373c1ba4d505465952d188189f899cc53668e8ee879021bee772283f3ed4e9333d28eeefc79d6766730aec26292703725d816c98e22f8c4b60e905e31250d7589897a4e379d3cf20b0dc72564f71a9bea13c1aee1a1a1200fefa492bd11324204b149a1c8ddea8bf0a28e1c1668f969db64b20e7faea23227179349cf52c316121e71a3fd2a001afbf9943678f86d4867dd14fe77731268370709a766893a061af415b4be2fffe1bc09396dc62e0f7d9fb4bab2ae665261db1bde40f964ceaba4f933427f65f97127364b4cbc0fd7cfc48136895bad1b1b94d44afbb259ddf97d56a53f41548c54b8a81ee984a403723959b1e00d09d31a02254817ca22123dd842c2d9a119e5c958ba9557f4abe68b80ab39f2c8652bab2ad05fecf8b25f70ce79de6f55517294ec87c1ade340245f83f77caa5e10f18cffdf28923916173665d315e03c0bda20f4c0aa4c2fd4fc20e7334c1a7839cbae5eba8ecc98362233b6eceda1ca1f8e62a5c1683834cf2948fdafc5dcb4c1326606e7fc0dd95ba3f23e9622a9349dd6149c798048c46d5fdfcb0c830f26890bb1544adc394c4b9874766ef5d8b100912cde93824a0b779324f7e24c4c2cd0387a070adf42cb95e38448b964e44a449918cd150627e2c60ed6376be25d93fb0c906b6277548aa76e4375061bc18d394fdbd8f6c259c8760cbe82b52e9c9c0594365dc5622222310e2a09f53d2b4922bdbac724fd4f568a8ffbc022add14600a13f0d011c584de82cae22891afc407595642e8627c01e0932c13f823a29b9aca3d12e211d18a950b79073adc1e514a308bbb4685af5e139394e6a5152fe5749b95184d85115c7050cfe59e0368208b78873674ad2526dcbb7c5b788973af22e8b7cd9d8556c2573525d1b7c8ec2568b379996a5aa6e904982d9da456fb0dc3d528c132cc7c16dc1d2d969354abaac537b16bf2b70312056d78288481dd78a6220911c73363f6b3db997e64184151a075c291c8526e5abb50fbef90ac7d482fc76c030606ec58ab5ec10e4b90fdf87a415f89a0fa8e04cf7ffc62099f48334af9176d2d2ae28e2f27c17a29879ecbc9bf7503f9733285031beaddeb4a7eb91ab8488d69575f6b4153624e503652d374f71c865484dc86825b7e13f590276996b813a386971ea19ec02a017e4c18b7e35f16c894d1aa1ccbcc2f0ea258dceeee7bd0ad0fc802517f37701812d3b04183d13120c1a3055b1ad809d9993e30ef73462a343c737db04cd4c764f95e7fc9c74b367f4ab7638bc49d2e6549816ece348083778bf47e384b77ff8bcf0359bbca65e475ccd78f79659e2ba0cb55fc2e47801d9d14de80877429a9e7f75f9d7f708c4d66274ab6afe9476a747ac1e38d65c6d6311189300415fa73e551ba40c6269010339c0a92322da95b72d67c8366883556a436638e52be57c76351672a593d5cc701a552cb9a0762773f9fed496bce5060e6b1ed9fece43c5f76743a8f2202ac451addccd58ccb2eb6d80d751092833dfed3aec9cd87fc6692ce74b2a8fbfd9376a310ac33a50169a856546716d91126c5f31eb7f4cd2dae6dce61750d6e19ca2743fce4bd6afa7ff37243f0e7104b97c101318727e4dde5bb316b48023749c9881397b8745d4378e8bf889bf91994055e19911c42f8963da5684168d2b9fec03cc9fd3b5292cbe05ea5a0fee8ce575f7e32fbdd33ffc93584caa4347687a7ceb6914a39055d42f18422716b0fbf67285aeaeb7e0c0ee50f19223d67e64c41df60418cb872349c4298183b4dc8039b4e52430018206f505a40efc78226489e3aa1495b397694c037804be42fdfd17c476d8e3509497e75a0e0db57e03feae191e1283920485b3cdf2bf023f183beea6fb04b20ca2481eb8c3d02690b6d8ad3e3c69ecd3cce9c06f9c99c6dbde6f2f51501a3cdf33b63cdc3e4d1ddf232df99872abe66503cf7e8178c5818e02f28276257919a5c4fffbd5ccd44a996c35b08671d15850d0eaa3f5cf8b1c193b299f05c6d0faab65a121d6e79660ca053dc79abcdf2ea3b380ec5c64c48c11d57c134cf6d4c91ff8dd2c93cf9707851406c9f897f40d501394ed7d20e1e08d423eaced203f205c7ea52310a567d80f035d60b9ea8a5a24f09d1ac147463a4ab361bccc457eb350af0bdac9ccd671b9509926880c31f1b8f91850e7cfb0b45c3b16dc9bbd7b527dcc0ebbe6a1e78ab81ae505ecaad95d9ecb932c6e0155b9d3b6ea4b1b7c2f3b269245d56b0c57dab63b7a94ffaa34c55b3fd522a46ff137eec71f6c02a87fd025c8f8df4cd5c1a039817234fbc17a7f6988d42c5450384be275e012ff96ddcac063c2133488e0093a80231d46c7d355d70e81a2e7435dbb9ba284799063accdf52940a10d22a6d646a8eaf2d66ff7dbcde5b5c7cc6c4cdcd227a65033e9eecaadf0965bd3294adbdce8c708c5c136a304f6a8751bdae3c60606108009500", @ANYRES32=r7, @ANYBLOB="aa8ef9d1af362a4bcfcc0f2dc82c6597aff6040ce1b05c496266526ffcb2f9b23d104d985ffa739a042b28672ec3b268cfda8bb25b9dcb833d5c36867d1826bd1dc46b820a043b9648f08d7776fe574d1216f152fe46c568b34aacd872d72a6367108d811e5288d9676c266ad61876284cec52a7f18977228a508906"], 0x10b0}, 0x1, 0x0, 0x0, 0x802}, 0x80)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f00000000c0)=0x6)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x3)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xe000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:32 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6b01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:32 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x6b6b6b00, 0x0)

00:12:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6b02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:32 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:32 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xf6ffffff, 0x0)

00:12:32 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x294, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_PAYLOAD={0x101, 0xa, "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"}, @NFQA_PAYLOAD={0x75, 0xa, "c7c5fd1f3580075bbc78fef511ce5e08328c57009a81c3d0d064fc55a88cf4c8c94f2f7734aff00485c6ba08fda5ef34d6b4725fe924fc0307608f1eb9bd2b672691a58c5ef4feccafc9e85caf2de825c0ddea4cf3532a734f53a70763de781d2ee204b0a9c123dcb8dfc9ff0bbd7fdbb2"}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x18, 0x17, [0x2, 0xffffffff, 0x1, 0x1, 0x5]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, [], 0x36}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x2}}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7f}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x49f900}}]}, 0x294}}, 0x800)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xfc00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:32 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3153.030785] kauditd_printk_skb: 2 callbacks suppressed
[ 3153.030798] audit: type=1804 audit(1592179953.233:1771): pid=8270 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:33 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x206)

00:12:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6b03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:33 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xfe80, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:33 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r6, r6)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000180)={[0x8, 0x8, 0xe9, 0xffffffff, 0x7fff, 0x80000001, 0xe715, 0x8, 0x2, 0x8, 0xffffffff, 0x3, 0x400, 0x8001, 0x4, 0x400, 0x9554, 0x72c10000, 0x40, 0x1, 0x0, 0x20, 0xfffffff8, 0x3, 0x0, 0x2, 0xf6b2, 0x9, 0x7, 0x2, 0x5, 0x3, 0x7, 0x9, 0x9, 0x1, 0x7, 0x5, 0x5, 0x9, 0x4, 0x7fff, 0x2, 0x9, 0x3, 0xffffffff, 0x7, 0x40, 0x1, 0x70db0, 0x10001, 0x7, 0x3, 0x6, 0x7f, 0x800, 0x4, 0x2, 0x101, 0x4, 0x96, 0x4, 0x3, 0x9, 0x3158, 0x6, 0x7, 0xffffffff, 0x200, 0x1, 0x3, 0x7daedc75, 0x844a, 0x401, 0x100, 0x8, 0x7, 0x6, 0x5, 0x5, 0x80000000, 0x2, 0x5, 0x9, 0x10001, 0xda, 0x1, 0x81, 0x101, 0x800, 0x7, 0x8000, 0x5, 0x3, 0x6, 0x4, 0x10001, 0x4933, 0x9, 0x3, 0xfff, 0x0, 0x5, 0x4, 0x0, 0x7fff, 0x402, 0x7, 0x8000, 0x3f, 0x2, 0x0, 0x7ff, 0x3f, 0x0, 0x4, 0x3, 0xe4ba, 0x9, 0x8000, 0x46064105, 0x9, 0x4, 0x36, 0x0, 0x400, 0x3, 0x4, 0x7, 0x7, 0x9, 0x7, 0xa01f, 0x99, 0xe8, 0x6, 0x7, 0x3c57, 0x7, 0x8001, 0x4, 0x0, 0x4, 0xffff66d7, 0x3, 0x8, 0x6, 0x0, 0x401, 0x6, 0x7ff, 0x80, 0x800, 0x7, 0x8001, 0xf77, 0x1f, 0x200, 0x2, 0x0, 0x1000, 0x3, 0x400, 0x10001, 0x6, 0x7f, 0x1f, 0x3f, 0x1, 0xcc10, 0x1f, 0x1, 0x4, 0xc49e, 0x7fff, 0xd89, 0x7ff, 0xfff, 0x548c, 0xff, 0x4000, 0x0, 0x401, 0x401, 0x7ff, 0x7, 0x200, 0x4, 0x800, 0x9, 0x3, 0x401, 0x3f, 0x8, 0x4, 0x5, 0x6, 0x0, 0x4, 0x7, 0x80000001, 0x4, 0x6d9b, 0x3, 0x1, 0x3ff, 0x1, 0xffff, 0xffffffff, 0x78, 0x1f, 0x5, 0x7, 0x4, 0x3, 0x9, 0x1000, 0x80, 0x2059, 0x10000, 0x9, 0xff, 0x9, 0x8, 0x9, 0x2, 0x7, 0x2, 0x0, 0x4, 0x1ff, 0x6, 0x10000, 0x1, 0x5, 0x5e1, 0x18e00000, 0x8, 0x8000, 0x9, 0x3f, 0x9, 0x1, 0x6, 0x8, 0x94c7, 0x3, 0x3, 0x3, 0x100, 0x200, 0x5d3c, 0x1, 0x2, 0x3, 0x1, 0x0, 0x401, 0x50, 0x2, 0x1000, 0x2, 0x6, 0x80, 0x10001, 0x6, 0x8, 0x1f, 0xa467, 0x1, 0xac, 0x3, 0x8, 0x7, 0x38, 0x7, 0x1, 0x4, 0x1, 0x1, 0xfffffffb, 0x8, 0x4, 0xba, 0xc2c, 0x10001, 0x8e, 0x7ff, 0x3, 0x0, 0x101, 0xff, 0x9, 0x401, 0x9, 0x6, 0x4bc, 0x8, 0x8, 0xffff, 0x8001, 0x7, 0x2, 0x0, 0x7e0b0659, 0x2, 0x0, 0x3, 0x401, 0x80000001, 0x1, 0x9, 0x5, 0x3, 0x401, 0xfff, 0x1de, 0x8001, 0xe2f, 0x1, 0x0, 0x8, 0x7, 0x4, 0x1, 0x5, 0x2, 0x2, 0x0, 0x20, 0x2, 0x3f, 0x1, 0x20, 0x1, 0x791, 0x1, 0xfffffe7f, 0xfff, 0x1, 0x3, 0x0, 0x3ff, 0x2, 0xfffff001, 0x4b7, 0xf95, 0x0, 0xc391, 0x0, 0x10000, 0x7, 0x0, 0xfff, 0x400, 0x7fff, 0x8, 0x1, 0x1, 0xfb, 0x4, 0x2, 0x9, 0x1000, 0xfff, 0x9, 0x40, 0x2, 0x8, 0x9b0a, 0xfffff001, 0x1f, 0x80, 0x39d2, 0x1, 0x7, 0x5, 0x1, 0x4, 0x5, 0x1, 0x4, 0x80, 0x3, 0x10000, 0x7, 0x9, 0x0, 0x80, 0x2, 0x2, 0x2, 0x8, 0x8, 0x400, 0x7, 0x12a, 0x474a, 0xffff, 0x1, 0xffff, 0x33d, 0x0, 0x0, 0x4, 0xc0a5, 0x20, 0xffffffff, 0xfd, 0x6, 0x1, 0x600, 0xffffffff, 0x3ff, 0x9b5d862, 0x8, 0x6, 0x2211, 0x7f, 0x81, 0xfffffff7, 0xffff, 0x1ff, 0x0, 0x7, 0x19, 0x8001, 0x7fffffff, 0x4, 0x1, 0x6201, 0x101, 0xe7f, 0x4, 0x5, 0x1, 0x6b, 0x401, 0x295673ae, 0x5, 0x30000000, 0x401, 0xfff, 0x91c3, 0x1, 0x5, 0x3e55, 0x8, 0x29, 0x8, 0x4, 0x8, 0x0, 0x7d7, 0x200, 0x10000, 0x8000, 0xf5, 0x6, 0xfffff800, 0x8328, 0x9, 0xffff, 0xfffffff8, 0x0, 0x5f, 0x5, 0x7fffffff, 0x571b, 0x80000000, 0x800, 0x80000001, 0x8001, 0xffff, 0x0, 0x6, 0x0, 0xffff, 0x1, 0x37ed, 0xfff, 0x1eb, 0x9a6, 0x0, 0x9e55, 0x100, 0x2, 0x97, 0x2, 0x0, 0x8, 0x7fff, 0x80, 0x8, 0x1f, 0x7fffffff, 0x809, 0x5, 0x200, 0x8d, 0x7, 0x1, 0x1ff, 0x1, 0xc0000000, 0x3, 0x80, 0x3, 0xf1a8, 0xffffffff, 0x1ff, 0xe7, 0x8, 0xffffffff, 0x1, 0x3, 0x8000, 0xff, 0x100, 0x1f, 0x4, 0x494, 0x80000, 0x10001, 0x200, 0x41, 0x6, 0x3, 0x9, 0x7, 0x5, 0x1841, 0x43b, 0x100, 0x2, 0x2, 0x33, 0x9, 0x5b, 0x3, 0xff, 0xfff, 0x0, 0xc0000000, 0x1, 0xbe8, 0x7, 0x467, 0xffffff20, 0x7, 0x3, 0x404, 0x800, 0x7, 0xac, 0x3ff, 0x1ff, 0x40, 0x8, 0x7fffffff, 0xaf94, 0x7ff, 0x1ff, 0x1800, 0x1000, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xffff, 0xd218, 0x6, 0x52, 0x2, 0x86e, 0x1, 0x6, 0x71, 0x7, 0x0, 0x10001, 0x1, 0x2, 0xaa58, 0x100, 0x7, 0x0, 0xffffffff, 0x3, 0xffff8003, 0x10001, 0x80000000, 0x0, 0xffffff15, 0xffffffff, 0x272, 0x0, 0x1, 0x5, 0x5, 0x5, 0x9, 0x0, 0xffffffff, 0x0, 0x1aa, 0xffffffff, 0xffffffe5, 0x1, 0x4, 0x8, 0x3, 0xfffffffb, 0x100, 0x3b00000, 0x0, 0x8, 0x2, 0x81, 0x4, 0x6, 0x7ff, 0x5, 0x0, 0xa0000000, 0x1, 0x270, 0x681, 0x7, 0x10000000, 0x3f, 0x10001, 0x8101, 0x4, 0x7ff, 0x3, 0xffffff02, 0x4, 0x7fffffff, 0x3, 0x80, 0x100, 0x3, 0x9, 0x1, 0xffff, 0x7ff, 0x5, 0xad97, 0x3f, 0xbb3, 0x3ff, 0x7, 0x9, 0x1, 0x7, 0x1, 0x8, 0x3ff, 0xffffffff, 0x7, 0x6, 0x5, 0xa04e, 0x7fffffff, 0x6, 0x0, 0x4, 0x3, 0x1, 0x93c, 0x6, 0x8, 0xd133, 0x7f, 0x1000, 0x7f, 0x7f0, 0x6, 0x1, 0x6, 0xc00000, 0xec, 0x6, 0x1, 0x9, 0x3, 0x1000, 0x402c39da, 0x5, 0x1ff, 0xa10b2df, 0x5, 0x0, 0x521f, 0x6, 0x4, 0x4, 0x8001, 0x0, 0x3, 0x1f, 0x2, 0x8001, 0xb74fd1f, 0x9, 0x200, 0x7fffffff, 0x4, 0x480000, 0xfffffa1d, 0x6bd, 0x6b4, 0x2, 0x81, 0x0, 0x7, 0x5, 0x5, 0x6, 0x3ff, 0x0, 0xd5b, 0xfc59, 0x81, 0x19f9, 0x5, 0x100, 0x8, 0x81, 0x10001, 0x2, 0xb3, 0xefe, 0x80, 0x6, 0xffffffff, 0x0, 0x20, 0x1, 0x0, 0x3, 0x0, 0x7, 0xffff8000, 0x3, 0x81, 0x121, 0x8, 0xffffffff, 0x40, 0x4, 0x4, 0x97, 0x8000, 0x4, 0x4, 0x4, 0x42a, 0x401, 0xfffffff8, 0x710, 0x1, 0x8, 0x7, 0x1, 0x4, 0x1, 0x6, 0xffffff00, 0x66393f8, 0x2, 0x1, 0x8, 0x1, 0x436, 0x8, 0xffffffff, 0x0, 0x5, 0x5, 0x7ff, 0xe1, 0x80, 0x203, 0xac, 0x4, 0x0, 0x7, 0x6, 0x80000001, 0x10, 0xd, 0x91, 0x8, 0x8, 0x8, 0x9, 0x0, 0x4941, 0x4828, 0x9, 0xef, 0x5, 0x1, 0x1, 0x7, 0x20, 0x20, 0x3, 0x60, 0x40, 0x8, 0x4, 0x80000000, 0x4, 0x80000001, 0xff, 0x8, 0x9, 0x401, 0x7, 0x2, 0x81, 0x0, 0x1ff, 0x20, 0x1, 0x56f, 0x1, 0x6, 0x1f, 0x7fff, 0x10001, 0x2, 0x3, 0x1, 0x800, 0x5c4, 0x6, 0x7fff, 0x9b, 0x67bfccb7, 0x5, 0x3, 0x2, 0x20, 0xfffffeff, 0x3, 0x3, 0x7fff, 0xfffff0ac, 0x5, 0x400, 0x7, 0x101, 0x8, 0x7e, 0x1, 0x4, 0x1, 0x5, 0x101, 0xcc, 0x0, 0x4, 0x3, 0x9, 0x5, 0x1000, 0xfff, 0xfff, 0x0, 0x9, 0x6, 0x4608, 0x400, 0x4, 0x1f, 0x51f, 0x235ca29b, 0x91, 0xc5, 0x1, 0x7, 0x0, 0x9, 0x4, 0x1, 0x1, 0x6, 0x98c8, 0x0, 0x401, 0x0, 0x1, 0x3, 0x3554419f, 0x3, 0x6, 0x80000000, 0x0, 0x4, 0x2, 0x200, 0xbba, 0x3bd, 0x7, 0x7, 0x2, 0x1000, 0x20, 0x5, 0x800, 0x7fffffff, 0x9, 0x6, 0x6, 0x9, 0x1, 0x0, 0x0, 0x5, 0x9, 0x3ff, 0x0, 0x400, 0x6, 0x7fffffff, 0x4, 0x7fff, 0x6, 0x4, 0x3, 0x7, 0x9, 0x80000001, 0x6, 0x29f, 0x5a9, 0x900, 0x42, 0x9, 0xffff0000, 0x1, 0x2, 0x7, 0x8000, 0x401, 0x0, 0x3, 0x3, 0x6, 0x0, 0x9972, 0x1, 0x5, 0x1, 0x2, 0xb0f, 0x1, 0x5, 0x0, 0x8001, 0xe3, 0xfffffff9, 0x7, 0x9, 0x8, 0x3, 0x90, 0x7, 0xef, 0x5, 0x8, 0xc3, 0x1, 0x10000, 0x1ff, 0x9bd, 0x93, 0x0, 0x81, 0x9, 0x10000, 0x0, 0x8000, 0x7, 0x40, 0xffff, 0x2, 0x9, 0x81, 0xbc, 0x100, 0x80000000, 0x8, 0xfffff11d, 0x1ff, 0x3, 0xfff, 0xb8, 0x6, 0x4597, 0x0, 0x6, 0x7fff, 0xda3, 0x9, 0x10001, 0x10000, 0x9, 0x6992, 0x9, 0x49, 0x401, 0x3, 0x1ff, 0x7, 0x6, 0x40, 0x9, 0x40, 0x80000000]})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup2(r8, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
connect$inet(r9, 0x0, 0x0)

00:12:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:33 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeff0000, 0x0)

00:12:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6c00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:33 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xfec0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:33 executing program 5:
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xab, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
sysfs$3(0x3)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3153.500844] audit: type=1804 audit(1592179953.703:1772): pid=8303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:33 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xff00, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3154.278195] audit: type=1804 audit(1592179954.483:1773): pid=8325 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:34 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x207)

00:12:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6c01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:34 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeffffff, 0x0)

00:12:34 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0xffff, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:34 executing program 5:
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x88000284, 0x208)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg$can_raw(r1, &(0x7f0000000600)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/81, 0x51}], 0x6, &(0x7f0000000540)=""/189, 0xbd}, 0x10002)

[ 3154.485002] audit: type=1804 audit(1592179954.683:1774): pid=8341 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:34 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfffff000, 0x0)

00:12:34 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6c02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xffffffff, 0x6, {<r2=>0xffffffffffffffff}, {r1}, 0xffffffff00000000, 0x4})
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x8)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x200})
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:35 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x208)

00:12:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6c03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:35 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
connect$inet(r5, 0x0, 0x0)

00:12:35 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfffffe00, 0x0)

[ 3155.354961] audit: type=1804 audit(1592179955.563:1775): pid=8384 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6d00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x3, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:35 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x8)
r0 = socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)

00:12:36 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfffffff6, 0x0)

00:12:36 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3156.095888] audit: type=1804 audit(1592179956.303:1776): pid=8384 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:36 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x209)

00:12:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6d01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:36 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x4, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:36 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$eventfd(r1, &(0x7f0000000000)=0x5, 0x8)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x2, 0x20000)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r2, r2}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha256-avx\x00'}})
keyctl$update(0x2, r3, &(0x7f0000000040)="3b1f659a85342153b651ca25a6bcd1bd1884c1b66f94f1628bd2d041ff9da5a5d927dac1a35a593a9ad092cf631ef75739cd40ec9a5e64e0f8730e74484bab4665bcf8dfa16ae443b316a4c56f86e0b204356ffb06da3953cab37ff2434fdce990fb2d98cfb6d492ea3f775a3c0e9f48303ec7c9b89edb542d17d04aa2626d8337dfe3a639923e951a07f689ce7ddc1d8a90e0d5ef9842ee643da52e6469", 0x9e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:36 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6d02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:36 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3156.344184] audit: type=1804 audit(1592179956.543:1777): pid=8428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:36 executing program 5:
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x252100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x80, 0x6, 0x0, 'queue0\x00', 0x66388c02})

00:12:36 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:36 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfffffffe, 0x0)

00:12:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6d03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:36 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:37 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x20a)

00:12:37 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xffff0001}, &(0x7f0000000040)=0x8)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6e00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x6, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:37 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:37 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x1000000000000, 0x0)

00:12:37 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6e01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3157.197795] audit: type=1804 audit(1592179957.403:1778): pid=8485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x7, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3157.313541] x_tables: ip6_tables: REJECT target: only valid in filter table, not 
00:12:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6e02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:37 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000), 0x4)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:37 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:38 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x20b)

00:12:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x9, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:38 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6e03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:38 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r0, 0x80047437, 0x20000000)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r2, 0x0, 0xffffffffffffffba)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

00:12:38 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x6b6b6b00000000, 0x0)

00:12:38 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6f00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3158.130937] audit: type=1804 audit(1592179958.333:1779): pid=8535 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xb, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:38 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:38 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec09, 0x0)
r6 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x220000, 0x6)
ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r7}}, 0x20}}, 0x0)
recvfrom$packet(r1, &(0x7f0000000000)=""/85, 0x55, 0x0, &(0x7f0000000080)={0x11, 0xf8, r7, 0x1, 0x10, 0x6, @multicast}, 0x14)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:38 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xf0ffffffffffff, 0x0)

[ 3158.583455] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3158.781192] bridge0: port 3(veth29) entered blocking state
[ 3158.809683] bridge0: port 3(veth29) entered disabled state
00:12:39 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x20c)

00:12:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6f01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3158.902524] audit: type=1804 audit(1592179959.103:1780): pid=8574 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3158.943426] device veth29 entered promiscuous mode
00:12:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:39 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xf, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3158.991305] device veth29 left promiscuous mode
[ 3159.030407] bridge0: port 3(veth29) entered disabled state
00:12:39 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeffff00000000, 0x0)

00:12:39 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2c, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3159.218109] audit: type=1804 audit(1592179959.423:1781): pid=8595 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6f02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3159.258340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
00:12:39 executing program 5:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7fffffff, 0x5, {<r1=>r0}, {0xffffffffffffffff}, 0x7, 0x7})
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xe2, 0x0, 0x0, 0xfc, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext={0x7, 0x33}, 0x6000, 0x2000, 0x2, 0x2, 0x400000000, 0x0, 0x2}, r1, 0x2, 0xffffffffffffffff, 0xa)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x6f03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:39 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x33, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:40 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x20d)

00:12:40 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x1f8, 0x1f8, 0xd0, 0x2f0, 0x2c8, 0x2c8, 0x2c8, 0x2f0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x2, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast2, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xe7)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000400), &(0x7f0000000040)=0x4)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7000, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:40 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x0)

00:12:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x3a, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3159.972499] audit: type=1804 audit(1592179960.183:1782): pid=8634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7001, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3160.160429] audit: type=1804 audit(1592179960.363:1783): pid=8645 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x5c, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:40 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x20e)

[ 3160.293891] audit: type=1804 audit(1592179960.433:1784): pid=8645 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7002, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:40 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x200000000000000, 0x0)

00:12:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:40 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, r0)
r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.#}{\x00', r0)
r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, r2)
keyctl$link(0x8, r1, r2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

[ 3160.534395] audit: type=1804 audit(1592179960.743:1785): pid=8673 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7003, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x70, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7100, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xe0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:41 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha256-avx\x00'}})
r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, r2)
keyctl$unlink(0x9, r1, r2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:41 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x20f)

00:12:41 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x300000000000000, 0x0)

00:12:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7101, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfc, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3161.325188] audit: type=1804 audit(1592179961.533:1786): pid=8728 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:41 executing program 5:
socket$pptp(0x18, 0x1, 0x2)
syz_extract_tcp_res(0x0, 0x87, 0x18e)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x5a1a82, 0x28)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x143000, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x7fff, @ipv4={[], [], @loopback}, 0x1}, 0x1c)
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
bind$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
ioctl$TCFLSH(r0, 0x80047437, 0x20000000)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0x980000, 0x8, 0x0, <r7=>r5, 0x0, &(0x7f00000001c0)={0x990903, 0x40, [], @p_u8=&(0x7f0000000180)=0x4}})
ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000240))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @adiantum, 0x91cf4d6043385282, [], "963e0a906532d8445747af98688e9312"})
connect$inet(0xffffffffffffffff, 0x0, 0x0)

00:12:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7102, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xff, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7103, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:42 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x400000000000000, 0x0)

[ 3162.107740] audit: type=1804 audit(1592179962.313:1787): pid=8728 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7200, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:42 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x210)

00:12:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:42 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x1fe)

00:12:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7201, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:42 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x600000000000000, 0x0)

[ 3162.312264] audit: type=1804 audit(1592179962.513:1788): pid=8784 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7202, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:43 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x211)

00:12:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7203, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:43 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x3f00000000000000, 0x0)

00:12:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:43 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setuid(r1)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r2, &(0x7f0000000000))

00:12:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7300, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:43 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setuid(r1)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r2, &(0x7f0000000000))

00:12:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7301, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3163.446232] kauditd_printk_skb: 2 callbacks suppressed
[ 3163.446245] audit: type=1804 audit(1592179963.643:1791): pid=8839 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:44 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x212)

00:12:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7302, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:44 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:44 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x4000000000000000, 0x0)

00:12:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7303, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:44 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xf6ffffff00000000, 0x0)

[ 3164.341359] audit: type=1804 audit(1592179964.543:1792): pid=8881 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3164.385909] audit: type=1804 audit(1592179964.593:1793): pid=8881 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:46 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setuid(r1)
syz_extract_tcp_res(0x0, 0x81, 0x18e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r2, &(0x7f0000000000))

00:12:46 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:46 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x213)

00:12:46 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7400, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:46 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeff000000000000, 0x0)

00:12:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7401, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3166.669592] audit: type=1804 audit(1592179966.873:1794): pid=8910 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:46 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:46 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfeffffff00000000, 0x0)

00:12:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7402, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3167.422647] audit: type=1804 audit(1592179967.633:1795): pid=8951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:49 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7403, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:49 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2b, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:49 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:49 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xffffffff00000000, 0x0)

00:12:49 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x214)

00:12:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7500, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:49 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3169.716350] audit: type=1804 audit(1592179969.923:1796): pid=8961 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:50 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0xfffffffffffff000, 0x0)

00:12:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2c, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:50 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x215)

00:12:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7501, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3169.844546] audit: type=1804 audit(1592179969.993:1797): pid=8976 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3169.995065] audit: type=1804 audit(1592179970.183:1798): pid=8994 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7502, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7503, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:50 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2)

00:12:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x33, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:50 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x216)

00:12:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7600, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x3a, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x3b, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3170.952460] audit: type=1804 audit(1592179971.153:1799): pid=9051 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:51 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:51 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7601, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:51 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x3)

00:12:51 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:51 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3171.719725] audit: type=1804 audit(1592179971.923:1800): pid=9051 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:52 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x217)

00:12:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7602, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x3c, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:52 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:52 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4)

00:12:52 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

00:12:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7603, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3171.958577] audit: type=1804 audit(1592179972.163:1801): pid=9095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0100f0, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:52 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

00:12:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7700, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:52 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x218)

00:12:52 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6)

00:12:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:52 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

00:12:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7701, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:53 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7702, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:53 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010103, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:53 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf0)

[ 3173.018737] audit: type=1804 audit(1592179973.203:1802): pid=9142 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:53 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:54 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x219)

00:12:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7703, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010104, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:54 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:54 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x300)

[ 3173.753057] audit: type=1804 audit(1592179973.953:1803): pid=9172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:54 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7800, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3173.993560] audit: type=1804 audit(1592179974.193:1804): pid=9187 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010105, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7801, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:54 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:54 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21a)

00:12:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:54 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x600)

00:12:54 executing program 5:
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)

00:12:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7802, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:55 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}]}}}}}}}, 0x0)

00:12:55 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:55 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7803, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3174.983160] audit: type=1804 audit(1592179975.193:1805): pid=9234 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010107, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:55 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x3f00)

00:12:55 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}]}}}}}}}, 0x0)

00:12:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010109, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7900, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:56 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}]}}}}}}}, 0x0)

[ 3175.791958] audit: type=1804 audit(1592179975.993:1806): pid=9259 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:56 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21b)

00:12:56 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4000)

00:12:56 executing program 5:
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x23, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa01010b, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7901, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3176.142585] audit: type=1804 audit(1592179976.333:1807): pid=9270 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:56 executing program 5:
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x23, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

[ 3176.246886] audit: type=1804 audit(1592179976.413:1808): pid=9278 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:56 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21c)

00:12:56 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf000)

00:12:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7902, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:56 executing program 5:
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x23, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa01010f, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7903, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3176.597758] audit: type=1804 audit(1592179976.803:1809): pid=9305 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:56 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty]}]}}}}}}}, 0x0)

00:12:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa01012c, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:57 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21d)

[ 3176.793980] audit: type=1804 audit(1592179976.883:1810): pid=9305 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7a00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:57 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty]}]}}}}}}}, 0x0)

[ 3177.075294] audit: type=1804 audit(1592179977.283:1811): pid=9332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:57 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:57 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeff)

00:12:57 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty]}]}}}}}}}, 0x0)

00:12:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010133, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3177.173991] audit: type=1804 audit(1592179977.343:1812): pid=9332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:57 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21e)

00:12:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7a01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:57 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:57 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7a02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3177.448043] audit: type=1804 audit(1592179977.643:1813): pid=9359 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa01013a, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:57 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:57 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7a03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:58 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffe)

00:12:58 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa01015c, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:58 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21f)

00:12:58 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7b00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:58 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010170, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3178.249573] audit: type=1804 audit(1592179978.453:1814): pid=9397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:12:58 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7b01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:58 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6b6b6b)

00:12:58 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0101e0, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:58 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7b02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:59 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x220)

00:12:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:59 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0101fc, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7b03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:59 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf0ffff)

00:12:59 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:12:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7c00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:12:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010300, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:12:59 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:12:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7c01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:00 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x221)

00:13:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:00 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:00 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeffff)

00:13:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010500, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7c02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7c03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:00 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010600, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3180.539959] kauditd_printk_skb: 2 callbacks suppressed
[ 3180.540059] audit: type=1804 audit(1592179980.743:1817): pid=9503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:00 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x222)

00:13:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7d00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:01 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

[ 3180.736449] audit: type=1804 audit(1592179980.803:1818): pid=9503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3180.974480] audit: type=1804 audit(1592179981.183:1819): pid=9545 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:01 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1000000)

00:13:01 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7d01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010900, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:01 executing program 5:
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

[ 3181.284513] audit: type=1804 audit(1592179981.493:1820): pid=9538 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7d02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:01 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x223)

00:13:01 executing program 5:
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1b, 0x0, [@rand_addr, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa012302, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:01 executing program 5:
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1b, 0x0, [@rand_addr, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7d03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3181.781543] audit: type=1804 audit(1592179981.983:1821): pid=9590 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:02 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2000000)

00:13:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7e00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa012900, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:02 executing program 5:
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1b, 0x0, [@rand_addr, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:02 executing program 5:
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1b, 0x0, [@multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:02 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x224)

00:13:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7e01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa012b00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:02 executing program 5:
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1b, 0x0, [@multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

[ 3182.543716] audit: type=1804 audit(1592179982.753:1822): pid=9590 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:02 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x3000000)

00:13:03 executing program 5:
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x1b, 0x0, [@multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7e02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:03 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3182.824334] audit: type=1804 audit(1592179983.033:1823): pid=9641 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa012c00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:03 executing program 5:
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x1f, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty, @rand_addr]}]}}}}}}}, 0x0)

00:13:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7e03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3183.610369] audit: type=1804 audit(1592179983.813:1824): pid=9667 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:03 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x225)

00:13:03 executing program 5:
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x1b, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty]}]}}}}}}}, 0x0)

00:13:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa012f00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:03 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7f00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:03 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4000000)

00:13:04 executing program 5:
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x1b, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty, @empty]}]}}}}}}}, 0x0)

00:13:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7f01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3183.896197] audit: type=1804 audit(1592179984.103:1825): pid=9683 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:04 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3183.989632] audit: type=1804 audit(1592179984.173:1826): pid=9683 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:04 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x226)

00:13:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa013300, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7f02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:04 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:04 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6000000)

00:13:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa013a00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:04 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x7f03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:04 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8002, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:05 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x227)

00:13:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa013b00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:05 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:05 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8003, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:05 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x3f000000)

00:13:05 executing program 5:
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x0, [@rand_addr, @multicast1, @loopback, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa013c00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8100, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:05 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:06 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40000000)

00:13:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @loopback, @empty]}]}}}}}}}, 0x0)

00:13:06 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x228)

00:13:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8101, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local={0xac, 0x54}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @loopback, @empty]}]}}}}}}}, 0x0)

00:13:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8102, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3186.395859] kauditd_printk_skb: 3 callbacks suppressed
[ 3186.395873] audit: type=1804 audit(1592179986.603:1830): pid=9799 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local={0xac, 0x70}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @loopback, @empty]}]}}}}}}}, 0x0)

00:13:06 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6b6b6b00)

00:13:06 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x229)

00:13:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8103, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:07 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local={0xac, 0xe0}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3186.866801] audit: type=1804 audit(1592179987.073:1831): pid=9834 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8200, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:07 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0x0, [@rand_addr, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local={0xac, 0x14, 0x54}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8201, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:07 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0x0, [@rand_addr, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:07 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x22a)

00:13:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8202, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:07 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf6ffffff)

00:13:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:07 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0x0, [@rand_addr, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local={0xac, 0x14, 0x70}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:08 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0x0, [@multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8203, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local={0xac, 0x14, 0xe0}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3187.859061] audit: type=1804 audit(1592179988.063:1832): pid=9892 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:08 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0x0, [@multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8300, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:08 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x22b)

00:13:08 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeff0000)

00:13:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:08 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0x0, [@multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8301, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:09 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8302, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3188.832844] audit: type=1804 audit(1592179989.033:1833): pid=9932 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:09 executing program 5:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1000000)

00:13:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:09 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeffffff)

00:13:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8303, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:09 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x22c)

00:13:09 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8400, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:09 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010600, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:10 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21b)

00:13:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8401, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3189.821237] audit: type=1804 audit(1592179990.023:1834): pid=9982 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:10 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:10 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffff000)

00:13:10 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x22d)

[ 3189.931350] audit: type=1804 audit(1592179990.093:1835): pid=9982 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x6, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8402, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:10 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3190.098993] audit: type=1804 audit(1592179990.253:1836): pid=10003 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3190.242754] audit: type=1804 audit(1592179990.443:1837): pid=10007 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8403, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:10 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x22e)

00:13:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x9, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:10 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:10 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x21b)

00:13:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8500, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3190.509356] audit: type=1804 audit(1592179990.703:1838): pid=10029 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:10 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:10 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffe00)

00:13:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8501, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:11 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8502, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:11 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:11 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x22f)

00:13:11 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8503, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:11 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:11 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3191.277182] audit: type=1804 audit(1592179991.483:1839): pid=10042 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:11 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffff6)

00:13:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8600, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:11 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:11 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3191.466813] audit: type=1804 audit(1592179991.673:1840): pid=10086 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:11 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8601, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:11 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [0x0], @broadcast}}}}], 0x28}}], 0x2, 0x0)

[ 3192.247339] audit: type=1804 audit(1592179992.453:1841): pid=10119 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:12 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x230)

00:13:12 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8602, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:12 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffe)

00:13:12 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x2, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:12 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [0xff, 0x0], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:12 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast=0xa}}}}], 0x28}}], 0x2, 0x0)

00:13:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8603, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:12 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3192.484952] audit: type=1804 audit(1592179992.693:1842): pid=10137 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:12 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x3, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:12 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1000000000000)

00:13:12 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast=0x1c}}}}], 0x28}}], 0x2, 0x0)

00:13:13 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x231)

00:13:13 executing program 5 (fault-call:0 fault-nth:0):
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8700, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:13 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast=0xa000000}}}}], 0x28}}], 0x2, 0x0)

00:13:13 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6b6b6b00000000)

00:13:13 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast=0x1c000000}}}}], 0x28}}], 0x2, 0x0)

00:13:13 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3193.434605] audit: type=1804 audit(1592179993.643:1843): pid=10177 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8701, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:13 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast=0x3f000000}}}}], 0x28}}], 0x2, 0x0)

00:13:13 executing program 5:
syz_emit_ethernet(0xd, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:14 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x232)

00:13:14 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8702, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:14 executing program 5:
syz_emit_ethernet(0x92, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:14 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf0ffffffffffff)

00:13:14 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x6, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:14 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast=0xffff0008}}}}], 0x28}}], 0x2, 0x0)

00:13:14 executing program 5:
syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:14 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8703, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3194.338104] audit: type=1804 audit(1592179994.543:1844): pid=10226 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:14 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0xf}}], 0x2, 0x0)

00:13:14 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x7, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:14 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeffff00000000)

00:13:14 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x233)

[ 3194.457248] audit: type=1804 audit(1592179994.603:1845): pid=10235 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:14 executing program 5:
syz_emit_ethernet(0x200000d2, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:14 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8800, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:14 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x24}}], 0x2, 0x0)

[ 3194.667717] audit: type=1804 audit(1592179994.873:1846): pid=10253 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:14 executing program 5:
syz_emit_ethernet(0xfffffdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:14 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x9, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8801, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:15 executing program 5:
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:15 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x38}}], 0x2, 0x0)

00:13:15 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xb, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8802, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:15 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100000000000000)

[ 3195.434923] audit: type=1804 audit(1592179995.643:1847): pid=10253 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:15 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x5000}}], 0x2, 0x0)

00:13:15 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8803, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:15 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x234)

00:13:15 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xf, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:15 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x20000068}}], 0x2, 0x0)

00:13:15 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x802, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3195.619949] audit: type=1804 audit(1592179995.823:1848): pid=10301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8900, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:15 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x2c, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:16 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x803, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8901, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:16 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x200000000000000)

00:13:16 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:16 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x33, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:16 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x804, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:16 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x235)

00:13:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8902, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:16 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x2}}], 0x2, 0x0)

00:13:16 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:16 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x3a, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3196.486975] audit: type=1804 audit(1592179996.693:1849): pid=10352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:16 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x807, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:16 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x3}}], 0x2, 0x0)

00:13:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8903, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:17 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x300000000000000)

00:13:17 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x809, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:17 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x5c, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x4}}], 0x2, 0x0)

00:13:17 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x236)

00:13:17 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x80b, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8a00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x5}}], 0x2, 0x0)

00:13:17 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x70, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:17 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x830, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3197.405841] audit: type=1804 audit(1592179997.613:1850): pid=10398 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8a01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x6}}], 0x2, 0x0)

00:13:17 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x400000000000000)

00:13:17 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xe0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:17 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x844, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8a02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:18 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x237)

00:13:18 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x860, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:18 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xfc, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:18 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x7}}], 0x2, 0x0)

00:13:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8a03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:18 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8e0, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:18 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x8}}], 0x2, 0x0)

00:13:18 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x600000000000000)

00:13:18 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xff, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8b00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3198.403117] audit: type=1804 audit(1592179998.613:1851): pid=10453 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:18 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x900, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8b01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:19 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x238)

00:13:19 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x9}}], 0x2, 0x0)

00:13:19 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x3800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8b02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x2, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:19 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x3f00000000000000)

[ 3199.330220] audit: type=1804 audit(1592179999.533:1852): pid=10486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:19 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8b03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:19 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xa}}], 0x2, 0x0)

00:13:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x4, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:19 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x6000, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8c00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:20 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x239)

[ 3200.118691] audit: type=1804 audit(1592180000.323:1853): pid=10524 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xe}}], 0x2, 0x0)

00:13:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:20 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x6558, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8c01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:20 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4000000000000000)

00:13:20 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x10}}], 0x2, 0x0)

[ 3200.381636] audit: type=1804 audit(1592180000.583:1854): pid=10536 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8c02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x6, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:20 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:20 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xf6ffffff00000000)

[ 3201.192176] audit: type=1804 audit(1592180001.393:1855): pid=10566 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:21 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x23a)

00:13:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8c03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x11}}], 0x2, 0x0)

00:13:21 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x9, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:21 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8847, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:21 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeff000000000000)

00:13:21 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8848, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x60}}], 0x2, 0x0)

[ 3201.427458] audit: type=1804 audit(1592180001.633:1856): pid=10587 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:21 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8d00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:21 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0xb, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:21 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x300}}], 0x2, 0x0)

[ 3202.240399] audit: type=1804 audit(1592180002.443:1857): pid=10587 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:22 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x23b)

00:13:22 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8d01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0xc, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:22 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:22 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfeffffff00000000)

00:13:22 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x500}}], 0x2, 0x0)

00:13:22 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x4, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:22 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8d02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:22 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffff00000000)

00:13:22 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x5dc}}], 0x2, 0x0)

[ 3202.536821] audit: type=1804 audit(1592180002.743:1858): pid=10632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:22 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x23c)

[ 3202.614893] audit: type=1804 audit(1592180002.823:1859): pid=10632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:22 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8d03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:22 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:23 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:23 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x23d)

00:13:23 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x600}}], 0x2, 0x0)

00:13:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8e00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:23 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:23 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x700}}], 0x2, 0x0)

[ 3203.042316] audit: type=1804 audit(1592180003.243:1860): pid=10671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:23 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x2, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:23 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffff000)

00:13:23 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8e01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:23 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x900}}], 0x2, 0x0)

00:13:23 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x3, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8e02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:24 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x23e)

00:13:24 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xa00}}], 0x2, 0x0)

00:13:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8e03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x4, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xe00}}], 0x2, 0x0)

00:13:24 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x6, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x5, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8f00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:24 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0x0, 0x80000003}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r5, 0x80047437, 0x20000000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r0])
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200c0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x18, 0x140c, 0x4, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4804}, 0x4000)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[ 3204.030241] audit: type=1804 audit(1592180004.233:1861): pid=10730 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:24 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x9, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x1100}}], 0x2, 0x0)

[ 3204.361382] 9pnet: Insufficient options for proto=fd
[ 3204.401416] 9pnet: Insufficient options for proto=fd
00:13:24 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x23f)

00:13:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8f01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:24 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x2000}}], 0x2, 0x0)

00:13:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x6, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:24 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [{0x20, '@/'}, {}, {0x20, '9p\x00'}, {0x20, '9p\x00'}, {}, {0x20, '9p\x00'}], 0xa, "2307ddab68e7a725d01cea935326cecc772aa77f101bf8bb669f019298ed330534bc0ce4e9751988abd3d947a5789a429b7302760d4da5e1f55471b898e6faf12def5d498a839c9982ed3fdf4ddb7a42a45e01f1fc8ee1e5a21b47d7ba7d56d4610a642f234cf1f0acbfdab3b3f2864d24ff5123d7c0f1b87aa31fbd37f480a7c2ef2e3684936361ca116b71097333e38c87de67a824ef144a498767a0e2ac1e60f6193711f4c3658afce1740e6fe213c5e95a042cfff8d5f1999b640c43cfc6"}, 0xdc)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:25 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x3f00}}], 0x2, 0x0)

00:13:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8f02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x7, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3204.990244] audit: type=1804 audit(1592180005.193:1862): pid=10771 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:25 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8f03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:25 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x240)

00:13:25 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500ae8165ffff2e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d03002c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB="25162feea13a71", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r3 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r6}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001340)={r6, @in6={{0xa, 0x4e23, 0x2, @empty, 0x3}}, 0x1f}, &(0x7f0000000240)=0x90)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
readlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340)=""/4096, 0x1000)

00:13:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x4000}}], 0x2, 0x0)

00:13:25 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x9, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9000, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9001, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3205.765487] 9pnet: Could not find request transport: 
[ 3205.769006] audit: type=1804 audit(1592180005.973:1863): pid=10807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3205.796443] 9pnet: Could not find request transport: 
00:13:26 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x6000}}], 0x2, 0x0)

00:13:26 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x241)

00:13:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xb, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:26 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRES64=r2, @ANYRES16=r2, @ANYBLOB="30d61819aab0fa695aef776430025a8f255d74f13e7d0079723cc725d7b758cf034c984f5c3dbe4d4ef77adf6c7fac6b0c262ddbb7d76bdecdb7ccdc12cb90e0430ff0d0e97ec8e0b18029e593f9b0cdbad3268fa2a16fdcfd9180ab9629ecc1fea6924de8dc364f8ae9be7b5dbb2bd791190c472ce2e4af29460ceed4d2ff3df331cc71ac4aa9f64e887532f9c264fd1b0ce6d3a8074ee4e3aedc7e3c85ce6563ea2ad0a40a473b7a980cc961cd758e20e9ed29737fd318cf37e9316ff6", @ANYRES64=r3])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9002, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:26 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3206.028307] audit: type=1804 audit(1592180006.233:1864): pid=10835 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x80fe}}], 0x2, 0x0)

00:13:26 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c726664ced53bcdbcb0abb08ba77d204310a6566e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xf, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9003, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:26 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3206.298550] 9pnet: Insufficient options for proto=fd
00:13:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xdc05}}], 0x2, 0x0)

00:13:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9100, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3206.369815] 9pnet: Insufficient options for proto=fd
00:13:27 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x242)

00:13:27 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:27 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:27 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xfe80}}], 0x2, 0x0)

00:13:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9101, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3206.816288] audit: type=1804 audit(1592180007.023:1865): pid=10835 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:27 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x7, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:27 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x34000}}], 0x2, 0x0)

00:13:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9102, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x33, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:27 executing program 3:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r2])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[ 3207.058628] audit: type=1804 audit(1592180007.263:1866): pid=10894 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9103, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:28 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x243)

00:13:28 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9200, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x40000}}], 0x2, 0x0)

00:13:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x3a, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:28 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8001400200)
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000001c0)=""/60)
pipe2$9p(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r5])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9201, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x100000}}], 0x2, 0x0)

00:13:28 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xb, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3208.050841] audit: type=1804 audit(1592180008.203:1867): pid=10936 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x5c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:28 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r3, r3}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha256-avx\x00'}})
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r3, 0xd, 0x1000}, 0x0, &(0x7f0000000240)="9e63b8036cc24d5aed5af2ddd1", &(0x7f0000000480)=""/4096)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3da1e7880a9425709f463de545d0fef282f3cdceb7b2b492beb4c168da573b1e411240e739fb483d0a2cd2b942ae3ad39cdb472dd45b1076dc86ad161f7ba69b204bd19608009c865121ab11afae2467f0af16", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9202, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:28 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3208.232594] audit: type=1804 audit(1592180008.323:1868): pid=10942 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:28 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x244)

00:13:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x400300}}], 0x2, 0x0)

00:13:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9203, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:28 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:28 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x70, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3208.483826] audit: type=1804 audit(1592180008.683:1869): pid=10966 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9300, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3208.554468] 9pnet: Insufficient options for proto=fd
00:13:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x1000000}}], 0x2, 0x0)

00:13:28 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3208.642751] 9pnet: Insufficient options for proto=fd
00:13:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9301, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xe0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:29 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x2000000}}], 0x2, 0x0)

[ 3209.233195] audit: type=1804 audit(1592180009.443:1870): pid=11008 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:29 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x245)

00:13:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9302, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:29 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xfc, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x3000000}}], 0x2, 0x0)

00:13:29 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000280)={0xa20000, 0x4, 0x6, r3, 0x0, &(0x7f0000000240)={0x990af7, 0x6, [], @p_u8=&(0x7f00000001c0)=0xc9}})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES16, @ANYRESHEX=r3, @ANYRES64=r4], 0x15)
r5 = dup(r0)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r4, @ANYRESOCT, @ANYRESDEC=r0])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:29 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x2, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9303, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x4000000}}], 0x2, 0x0)

[ 3209.482490] audit: type=1804 audit(1592180009.683:1871): pid=11019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xff, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:29 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:29 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x246)

[ 3209.608195] audit: type=1804 audit(1592180009.753:1872): pid=11031 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:29 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000650700097b0000085e81dbaa0039503230"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e8095", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x4, 0x8102)
chdir(&(0x7f0000000040)='./file0\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
r5 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000440)="81f27321cf74951981cc651dc310116dea5f0e3c79b9e3e604fba66e26c7281dd52837ccf5db94ebd8585af06d2d5592fdfec4491c3f3ce71b47e21b2e0f8ed7c33da29e0e71cb7925b8f1fe17515ec9358cfbbd38f2876f2d869dad88b84d1674464724ae5065cc56e13052be015f6868bd96c9fed3108f9c6d8b76dad3acd8cf0cf37659ef3057021f47abeba4cad24da776843ee1d300fac4", 0x9a)
lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@ng={0x4, 0xd, "7c47c257ccca0a1e9eea03f5138d65"}, 0x11, 0x1)
ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000240))
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d10, &(0x7f0000000340)=0x27)

00:13:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9400, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x5000000}}], 0x2, 0x0)

00:13:30 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x4, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3209.775499] 9pnet: Insufficient options for proto=fd
[ 3209.804612] audit: type=1804 audit(1592180010.003:1873): pid=11049 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9401, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3209.852254] 9pnet: Insufficient options for proto=fd
00:13:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:30 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x6, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x6000000}}], 0x2, 0x0)

00:13:30 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffffaf09000008003950323030302e4c", @ANYBLOB="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"], 0x15)
r5 = dup(r1)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9402, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:30 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x7, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:30 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x247)

00:13:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x7000000}}], 0x2, 0x0)

00:13:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9403, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:30 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x9, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:30 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x90)
bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x1, @any, 0x100, 0x1}, 0xe)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r6, 0x80047437, 0x20000000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2210042, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYBLOB="2c77666bd4d61bba60457ef4288d5fd65162646e6f56f9187fb0995ad4c73d", @ANYRESDEC=r4])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:30 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0xb, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3210.703318] audit: type=1804 audit(1592180010.913:1874): pid=11097 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9500, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:31 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="505034302e4e0006e0602ebe944f844c29e22c547e4c8b76f9d7e1fc31ff6d2707f99f4cc3268bbe217f39e5f33e8d09a2b97b4cb98c7bd03921165fac508b13c6e5830ed8bcceedf31b18dfe45a354739114ee33dfe4de5e37a62eb6e7d732958642eb8b0f2ae0898404bfcf5057e5fa58af90ade5ff40e0b5d47c241f8a3d2913531acc42d5c9eb0"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x8000000}}], 0x2, 0x0)

00:13:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:31 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x30, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:31 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x248)

00:13:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9501, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x9000000}}], 0x2, 0x0)

00:13:31 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x44, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x4, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:31 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
recvfrom$inet(0xffffffffffffffff, &(0x7f00000004c0)=""/34, 0x22, 0x140, &(0x7f0000000500)={0x2, 0x4e24, @loopback}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x110800, &(0x7f0000000340)={[{@mode={'mode'}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x80}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x6}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@uid_eq={'uid', 0x3d, r6}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9502, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xa000000}}], 0x2, 0x0)

00:13:31 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x60, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:31 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="ed32f22c5d055484e30000000025cd9b4a060a5800907747c0c8625c66de5af8f9b5cb918f1235c7e710ad0dd159a45c34cafd7632f542d2c8950869b0870e94fc05d7e3b48100b90eeb947214c8a26035b9ad3ff9dd1e51ee62906779c7e9337310a2a76fb5bfdf256f51d507ee", @ANYRESDEC=r1])
chdir(&(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x5, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3211.662284] audit: type=1804 audit(1592180011.863:1875): pid=11144 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9503, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3212.071213] 9pnet: Insufficient options for proto=fd
[ 3212.110408] 9pnet: Insufficient options for proto=fd
00:13:32 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x249)

00:13:32 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0xe0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:32 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xe000000}}], 0x2, 0x0)

00:13:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9600, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:32 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:32 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x24a)

00:13:32 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x300, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:32 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00')
write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4cfeba474a83662535af1631035b8ca8d9f8a4cebf9611a0f21a5da4854efd6c4c608bf0cab906f1cbe052c8634ab50f657092eb33ae1912c21d064023eb6376662617a0dc63f56251436c8994c1be5f44278b1c9bdd6e44d17538c6570a24b42f2999471df9d03c04af507681981ed3592a013cdb4c968822ac54abcaf4f2bfd70359052c64d4f83cfdb998a18d576110930056f5c2584c487332dc3a3cc0028f50a3812fedfe3302a1bf3f133bcada8e6e50f496c2f11be043e7"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9601, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:32 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x10000000}}], 0x2, 0x0)

00:13:32 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x7, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:32 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x3e8, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3212.700717] audit: type=1804 audit(1592180012.903:1876): pid=11197 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9602, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x11000000}}], 0x2, 0x0)

00:13:33 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x600, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:33 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x9, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x20000000}}], 0x2, 0x0)

00:13:33 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x24b)

00:13:33 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xb, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:33 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x700, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9603, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x3f000000}}], 0x2, 0x0)

00:13:33 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r2, 0x80047437, 0x20000000)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x15)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000001c0))
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[ 3213.526592] audit: type=1804 audit(1592180013.733:1877): pid=11242 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:33 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x900, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9700, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x40000000}}], 0x2, 0x0)

00:13:33 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xf, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:34 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0xb00, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9701, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:34 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x24c)

00:13:34 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x60000000}}], 0x2, 0x0)

00:13:34 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500c4e765a01cab8a32e152ffff097b000008003950323030302e4c65a64fd4b4bcf4b4f064dd5406c15deb81dcf0622741d0b9195fed814c235a36f6287422fd193f2e90dea2768c8e734d0545628bb1daae1bf751fc4c35bdef65bb73b528646ca30ab880f1592da58badd8da60c049829e0bb40385256c5b13e7eb3e1dcc057c51d3ddf0cea9566dcd68ab651036677c7d3c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf|no=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
socket$inet6(0xa, 0x3, 0x80)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000240))
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:34 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x3000, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x2c, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9702, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3214.412175] 9pnet: Insufficient options for proto=fd
00:13:34 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x7ffffff7}}], 0x2, 0x0)

00:13:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9703, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:34 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x4000, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3214.468773] audit: type=1804 audit(1592180014.674:1878): pid=11290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x33, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:34 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x24d)

[ 3214.549689] 9pnet: Insufficient options for proto=fd
00:13:34 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0x8dffffff}}], 0x2, 0x0)

[ 3214.595989] audit: type=1804 audit(1592180014.774:1879): pid=11290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9800, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:34 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="f4ffffffe5ff0c0a7b00003700c99e7e34587c8a7412097f11442908003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f00000001c0)=0x6)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:34 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x4400, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xdc050000}}], 0x2, 0x0)

[ 3214.790370] audit: type=1804 audit(1592180014.994:1880): pid=11330 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:35 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x6000, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9801, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3a, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:35 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0))
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
accept$inet(r4, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x315, 0x0)
pipe2(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
inotify_add_watch(r6, &(0x7f0000000340)='./file0\x00', 0x21000008)

00:13:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xeffdffff}}], 0x2, 0x0)

00:13:35 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0xe000, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3215.066365] audit: type=1804 audit(1592180015.274:1881): pid=11317 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:35 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x24e)

00:13:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x5c, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:35 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0xe803, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9802, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xf5ffffff}}], 0x2, 0x0)

00:13:35 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0xffff, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3215.334612] audit: type=1804 audit(1592180015.534:1882): pid=11364 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:35 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={r5, 0x2, 0xfff9}, 0x8)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000340)={0x9, 0x0, 0x4, 0x10000, 0x1, {0x77359400}, {0x4, 0x1, 0x1, 0x3, 0x0, 0x9, "8c8bfe73"}, 0x5d, 0x1, @planes=&(0x7f0000000240)={0x31, 0x0, @fd, 0x7153096a}, 0x9, 0x0, r8})

00:13:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9803, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x70, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xf7ffff7f}}], 0x2, 0x0)

00:13:35 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9900, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:36 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x24f)

00:13:36 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xfe800000}}], 0x2, 0x0)

00:13:36 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x2, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:36 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xe0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9901, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:36 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES16=r3, @ANYRESOCT=r4, @ANYRESHEX, @ANYBLOB="56392575c58db9695a795c9a2d30dcf689aab7d159272b16e65e90e5fe345319d574d6c14f067873ebd121ae87c7ccea73827413e18528eb1da4bfe1215d5697846a0a6ee30f761694978f5c1af9999eb1cd05ae7f2a6085eadfdfaec698fb9381a6096e5befc0"])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:36 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x3, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9902, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3216.197872] 9pnet: Insufficient options for proto=fd
00:13:36 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xffff0000}}], 0x2, 0x0)

00:13:36 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x4, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3216.245958] audit: type=1804 audit(1592180016.454:1883): pid=11419 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3216.278199] 9pnet: Insufficient options for proto=fd
00:13:36 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xfc, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9903, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3217.015037] audit: type=1804 audit(1592180017.224:1884): pid=11442 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:37 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x250)

00:13:37 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x6, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:37 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xfffffdef}}], 0x2, 0x0)

00:13:37 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0xc03, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x67e}, &(0x7f0000000280)=0x8)
r6 = dup(r1)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9a00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x300, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:37 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xffffff7f}}], 0x2, 0x0)

00:13:37 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x7, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9a01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:37 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup2(r7, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001629b6956ebde148754ace65d79a59695ca946ef5bf3995febb3407c8cf939ecc7a82acf67023d930afa22f7f23f984fc37f65804409a4b20de6ae4651ec11db69165801003347444d5968d529f5a9c55608e5e0aa5a840709c07414021d6a35ffbd3385c838568d2048bf2c0f915cac3584a4c41722e96f695b86100d0603302265b12437a4f0060162445cf018103f774015374f75ac15b34b9f843603a46e1e3780ded5fb27568ec331da4852a9104321db621bfe1199cea456d368c2a3", @ANYRES16=r4, @ANYBLOB="08002dbd7000fbdbdf250100000008000700", @ANYRES32=r6, @ANYBLOB="080009000300000008000500e00000010800050000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = dup(r1)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffc}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3ddbe68b61deb4f90f9c2dff206195ef5d622824ed29f393c6e93c5401ad0b99abf820de3fd66fd8e225693c006297bad0d9bb9a95916308a0c00a93722c20b0b03f1a16cc1fb6e97d8f7f48905f1c2fcc0688e9f098f63e939c1886d004ce3ba37fa4eb17556ac7c43f2396665991b31fee5f9c1437e617e5c203156edf1ad89a75e3912d45d0122324166aacc470997388c7748d972fcf26a62b6a4dd8c9f46c7d680ecaa9949a07128e", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x48a002, 0x160)

00:13:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x500, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3217.300918] audit: type=1804 audit(1592180017.504:1885): pid=11463 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9a02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:38 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x251)

00:13:38 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x9, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:38 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xffffff8d}}], 0x2, 0x0)

00:13:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9a03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x600, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:38 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065fffffc7a00302e4cb0025076754e638efb137e4db8027875322fe2314434d9aa5ef9238c64e4f55a2aeca50e12864be6f3b27950319186e24a699ee3e95e6aedeec1d8b8aca08c1d16655077d5c2f9185305860909bccc2d6b2d5a86a2482ab6d082d01fb74520fb5bc0b4949f5fb892d96c836b210c4c8b6eafd55074ee830a5b5031f5dcdcb64e83f5eacafb5faf05e9c81fb25dacc4d914"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
chdir(&(0x7f0000000040)='./file0\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x6a0c40, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r2, 0x80047437, 0x20000000)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000240)={0x9c0000, 0x1, 0x7, <r5=>r2, 0x0, &(0x7f00000001c0)={0x99096a, 0x6, [], @value=0x1}})
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000280)=0x4, 0x4)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x5, 0x2000)

00:13:38 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xb, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9b00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:38 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28, 0xfffffff5}}], 0x2, 0x0)

[ 3218.254271] IPVS: Error connecting to the multicast addr
00:13:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x700, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3218.328428] audit: type=1804 audit(1592180018.534:1886): pid=11502 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3218.352674] IPVS: Error connecting to the multicast addr
00:13:38 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000240)=0x28)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:38 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x30, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:38 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x252)

00:13:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9b01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:38 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

00:13:38 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x44, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:38 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000240)={0x7ff, 0x9, 0x7, 0x1})
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9b02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x900, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:39 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x60, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3218.723349] kauditd_printk_skb: 1 callbacks suppressed
[ 3218.723362] audit: type=1804 audit(1592180018.924:1888): pid=11532 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x2}], 0x2, 0x0)

00:13:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9b03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:39 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xe0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:39 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xb00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:39 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x253)

00:13:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9c00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:39 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x300, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x3}], 0x2, 0x0)

00:13:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9c01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:39 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xf00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:39 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x3e8, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:39 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x254)

00:13:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r3])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x4}], 0x2, 0x0)

00:13:40 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x600, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3219.886438] audit: type=1804 audit(1592180020.094:1889): pid=11596 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9c02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x2c00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x5}], 0x2, 0x0)

00:13:40 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec09, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468db296b9df7270b7e7561f458bc24c7576ccc8fe28545f0708c770ccee1d0e12a7f30886f675c598997f80683b231ded8b0485e63bc801858c13f06cf22562dc51db47e66b47ba50f9183d374816e0761"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000300", @ANYRES32=r6, @ANYBLOB="22ef7c34e4bf4f70"], 0x20}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x800)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x4e23, 0xffff, 0x4e22, 0x8001, 0xa, 0xe0, 0x20, 0x0, r6, r7}, {0xfffffffffffffffe, 0x3, 0x401, 0xd10, 0x2, 0x0, 0x10001, 0x7}, {0x3, 0x3ff, 0x2, 0x875}, 0xb6, 0x6e6bb3, 0x2, 0x1, 0x0, 0x2}, {{@in6=@ipv4={[], [], @local}, 0x4d2, 0x32}, 0x0, @in6=@mcast1, 0x3505, 0x4, 0x1, 0x1, 0x40, 0xfffffffa, 0x101}}, 0xe8)

00:13:40 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x700, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9c03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x6}], 0x2, 0x0)

00:13:40 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x900, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3220.604479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:13:40 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x255)

00:13:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3300, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9d00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:40 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xb00, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x7}], 0x2, 0x0)

[ 3220.694877] audit: type=1804 audit(1592180020.904:1890): pid=11639 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:41 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x3000, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x8}], 0x2, 0x0)

[ 3220.928509] audit: type=1804 audit(1592180021.134:1891): pid=11655 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3221.014777] audit: type=1804 audit(1592180021.194:1892): pid=11661 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3221.377668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
00:13:41 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500ffffce68e9559e8ddbece55416cc0d637b0004000006005d72323030302e4c000000"], 0x15)
r3 = dup(r0)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESHEX=r3, @ANYBLOB="192954dd4896167825c3328785a763334dce2a139d45355c19a23519d4bac0b7673ac835b535bb083dcbae9b248fe92b91", @ANYRESDEC=r0])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9d01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3a00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:41 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x4000, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:41 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x256)

00:13:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x9}], 0x2, 0x0)

00:13:41 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x4400, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3221.591087] audit: type=1804 audit(1592180021.794:1893): pid=11677 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xa}], 0x2, 0x0)

00:13:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9d02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:41 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x257)

00:13:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3221.760265] audit: type=1804 audit(1592180021.884:1894): pid=11677 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:42 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x6000, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:42 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x800, 0x0)
sendto$packet(r1, &(0x7f0000000280)="8e0286ba9f89997540ceb0338f0ae167", 0x10, 0x4011, 0x0, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x311500, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000001c0))
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="2c7766646e6f3d6eb49f251fff670481facdf2923b4d7dabb4ef8e772389b73eafb19afa2c0da8fef5e9ff33cc8f31b952905ec60e956f4268c3a0f5c4d22a573c23a579e7e2481f6b221bf05e504f9445e8119c079f2231c7371d0502f7d94ff33eff2989a22c6892e3fc4bf330f3c4e518e0ff6ddfafa376bb1df0f08ba0c1ec54aa33e586c8591d03c64efad983117990625b155a6fcf4987283bddc63471210e9f58bbe207113085ae01bc8807840249895f686eaaaa0a20", @ANYRESDEC=r0])
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x1524, 0x6, 0x1, 0x301, 0x70bd29, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x7b, 0x0, 0x0, @pid}, @generic="63e678209f8966ba773a575379ced321e07fff93a2c3f7ac0f3dd14ea51067dc89e36ecda8f102d03a7fb7295c5346fb2e99e5298a5c0ad514018a3994e61fb9509af8e241c2d567405df718bc5d516ef43f655895c39eef99ed0b5711f486aedb9472ef5c641705bc32fd84e4523f8235b66fb39ab2d55c47bbec49c6f6838dac88c737175105d8", @nested={0x12f7, 0x82, 0x0, 0x1, [@generic="82aba22f67867a53988fc7baefd143ca9448ba34dddbaa2a73dc5e842d5aa41337f8972a746106013c097e0454b20dd52de95f22dc27bec17f67fdef2fd0c6f4505c3229c14ecc", @typed={0x8, 0xb, 0x0, 0x0, @fd}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@empty}, @typed={0x1004, 0x9, 0x0, 0x0, @binary="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"}, @generic="3081c3ed01e0eedc7c00c8b91b6ea2272434ab70c8145ba7c2db325a6d47a7be5d4067feeae55b5e04ebdfa1483ad00c4aa99af6650b88df6626ef853724aa39233e27048ac5042a09d941696abf7fb86c5e4be0a4132dfebe7899e58837aa961a4b38e65667299e0c5183b6b7b24339", @typed={0x8, 0x34, 0x0, 0x0, @pid}, @generic="73617b730b25820913725f05573ddc97f25182f630510ba921cc2e09f76b64ddafbddf87f130c7b2e6b5d649a12bcf603ff53faae5bdf7e5d3764d94a7263512e57377ab8a1a1ea086edc3f1763006764fed3a9989a09196cd230407ef3fb17ef714479b589eac567f6e99098bbfffd922397552096d3e9bbb2e9919736b658e775594ce0e96b22dcecec8ded5e840db6e2f42c19bdea5caad3eed2be36058c1a6e76cc209fa1022d96bb942974ad8b3db584b69202238718f6be487884fdee21a1930419317979a50f7490c163ed1fa", @generic="89eacad7164eafdd2982ffe833de2bd90dd92de98f024900b74496a2b9890d7333d2bb42372ae07fdd205718712bcb453173397161ac1f49d626fbdc33f3b48417dccb6090fb39bca113692a25c2627d1c62b58fdd07aa3722d90a2f5aeae87561e158ec216240a144fd9179299ddcf32d59ed4161bf4864b9e1800a5aa1e6e81f403f835ac6cdd566d0f9a501b5ef4cf6e7906c7229340ecc0b53521471b624b648b21c07121e7aff8db3f48556", @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x7}, @generic="6dbd987a91e2d53a12d95d8a5c571d8fbdb8681a9f17e711c2a96a9c8b6cc66794a2766da45ae59c1403aca567cb149ade40e4f8258da0d853419d74f55d292e28b47108ba542fb39506b9725bb09573a16ed08f3686e61a6761f7564fb795267deeca626b8e0d6c4b3b521882af053812b0df9b11b92c76f6049431dd98311461a432e46fa74369e3a40cef94f7a1817f3de77663a5cf893a04"]}, @generic="6673543c3b69f54f43477a61b4", @generic="75cefefb340d0ec71e8dfff55e0ecaea0c4cd26ad0c92ccc93b238517dbc1c5af344c34896cd26d32da3ac90985237e67d47f33a8d3e583d06386f3001d2503e16e6106402bce9671c2a5d14347a95e76ad3ee4d7d7e8a5788b4cf6008fdf0c32488dc39007fa6c7b142dfd4da4992b7195d4afee7c31cee00025be9949fb361bf324eccec12f4", @nested={0x4f, 0x81, 0x0, 0x1, [@generic="7e7fb35427b94bbfa72beb4bf2f83dbf679ed7881c0d887d4694e18af2560e7f149a3d757412fec8bab9fc3724573077ffec3cd6485003961405f4dbfa6e5835e9512a7c9eb4ff45e2774c"]}, @generic="cd3466f15080217506d275a62a6c4a14fec51383f90b39ec4c811dd897e7945de43f8469ad93d9e933ebc111175a31113526148cece876a671212a", @generic="45be3317ef1303f28e8f6c4532403436bfa45344d089c8e797ced253facf544832d6d14138767b171067ca1bea47b1206ed331c7435d2d65aea486b1106dc34158144f0cc6e2443909be2a01efe50f03640c36ffce550c97aae8e089c9", @typed={0xc, 0x16, 0x0, 0x0, @u64=0xd3}]}, 0x1524}, 0x1, 0x0, 0x0, 0x48081}, 0x24040001)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[ 3221.897723] audit: type=1804 audit(1592180022.104:1895): pid=11702 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9d03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xe}], 0x2, 0x0)

00:13:42 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xe000, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x4000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9e00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:42 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="74f2616e734f66642c7200006e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x2, &(0x7f0000000280)=[{&(0x7f0000000340)="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", 0x1000, 0xbf4}, {&(0x7f0000001340)="4986d57bdb958270580ae96a982b7e817efa44050f5656f9aba780e9513d054303a0c4c9e444f6c2634ec9452e2f8b5bf03391e5eae381dc6ead8dc5e6dc6ec5d8691ee9f18fc6d05e85a377a2fca9f80dadd3c493462409b5cbe6ad8b733cedef1c1142b8c2813b8565b7995dbfb256133acc66d7179fb7f3a6db80f0b130dc94f88170f5b73000dc1121549fc2fc641674214e1a92a0f9676f47d60e9b8974ca76f4cef018a28267a16c861e6c2bcf5315e0c00b31251bf087610f7bc4b58ceb2fb75bc8df772f43aba6c1b24782e956", 0xd1, 0x3f}], 0x0, &(0x7f0000001440)={[{@block_validity='block_validity'}, {@usrquota='usrquota'}, {@noacl='noacl'}, {@noblock_validity='noblock_validity'}, {@nolazytime='nolazytime'}, {@nodelalloc='nodelalloc'}], [{@fowner_eq={'fowner', 0x3d, r4}}]})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x10}], 0x2, 0x0)

00:13:42 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xe803, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:42 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x258)

00:13:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x5c00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9e01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:42 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xffff, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:42 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f00000001c0)={0x1, 'r'}, 0x2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x100000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfd.o=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x11}], 0x2, 0x0)

00:13:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9e02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x7000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:43 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3222.918976] audit: type=1804 audit(1592180023.114:1896): pid=11757 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9e03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x60}], 0x2, 0x0)

00:13:43 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000480)={0x30}, 0x30)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6(0xa, 0x3, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x6, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[], 0x0, 0x0, 0x4}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000001c0)={<r8=>0x0, 0x38, "c8b680ff25bd2f998b6b660d455e59a33def5eb0e12f38154ed786697a263addf040c80f98b7cc2510f249af8b1331a2519f7d632a2b9b0d"}, &(0x7f0000000240)=0x40)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000380)={r8, @in={{0x2, 0x4e24, @remote}}, [0x100000000, 0x8000, 0x4, 0x9, 0x2, 0x9, 0x7, 0x401, 0x16f, 0x800, 0x200, 0x9, 0xfff, 0x10000, 0x3]}, &(0x7f0000000280)=0x100)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:43 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x259)

00:13:43 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9f00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x300}], 0x2, 0x0)

00:13:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x7f00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:43 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e4f4f570f1103cb7b6e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9f01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:44 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x500}], 0x2, 0x0)

00:13:44 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x80fe, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3223.865990] audit: type=1804 audit(1592180024.074:1897): pid=11796 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9f02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:44 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x5dc}], 0x2, 0x0)

[ 3224.647951] audit: type=1804 audit(1592180024.854:1898): pid=11826 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:44 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x25a)

00:13:44 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x20000000)
r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@null, @remote, @null, @bcast, @netrom, @remote, @bcast, @default]}, &(0x7f00000001c0)=0x48)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x403c}, {r0, 0x1}, {0xffffffffffffffff, 0x4081}, {0xffffffffffffffff, 0x1}, {r0, 0x2019}, {r3}, {r4, 0x102}], 0x7, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x6]}, 0x8)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000240)={[{0x53d3, 0x2, 0x6, 0x0, 0x7c, 0xc9, 0x3, 0x8, 0x1f, 0xc6, 0x3, 0x0, 0x100000001}, {0x80000000, 0x16, 0x99, 0x1, 0x0, 0xc0, 0xcd, 0x3, 0x20, 0x0, 0x3, 0x9, 0x9}, {0x1, 0x6, 0x4, 0xab, 0x40, 0x80, 0x80, 0xa, 0x1, 0x4, 0x3f, 0x8c}], 0x7})

00:13:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xc0fe, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:44 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x9f03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:44 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x600}], 0x2, 0x0)

00:13:45 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x700}], 0x2, 0x0)

00:13:45 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa000, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3224.886462] audit: type=1804 audit(1592180025.084:1899): pid=11841 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:45 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766606e6f3d343fd999d65a8a10641a5bef130425032e93fb986d4e14152cb0500865c20fd4b9", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r3 = dup(r1)
getpeername$unix(r3, &(0x7f0000000300)=@abs, &(0x7f00000001c0)=0x6e)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:45 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:45 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3225.370885] 9pnet: Insufficient options for proto=fd
[ 3225.466705] 9pnet: Insufficient options for proto=fd
00:13:45 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x25b)

00:13:45 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x900}], 0x2, 0x0)

00:13:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa001, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:45 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:45 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xfc00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:45 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0xc600, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000001c0)="a8e9bfc50f98cb03bacc66982888360f", 0x10)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[ 3225.651894] audit: type=1804 audit(1592180025.864:1900): pid=11870 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa002, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:46 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xa00}], 0x2, 0x0)

00:13:46 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0xb, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3225.870662] audit: type=1804 audit(1592180026.074:1901): pid=11889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:46 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa003, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:46 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xfe80, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:46 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x25c)

00:13:46 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xe00}], 0x2, 0x0)

00:13:46 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x30, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa100, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:46 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xfec0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:46 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC=r1])
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x10c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, [], 0x2f}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x7fff, 0x3b, 0x9]}]}, 0x10c}}, 0x801)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa101, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3226.729669] audit: type=1804 audit(1592180026.934:1902): pid=11925 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:47 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x44, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xff00, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x1100}], 0x2, 0x0)

00:13:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa102, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:47 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x60, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3226.974868] 9pnet: Insufficient options for proto=fd
00:13:47 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x25d)

00:13:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x2000}], 0x2, 0x0)

00:13:47 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @default, @bcast, @rose, @rose, @null]}, 0x48)
listen(0xffffffffffffffff, 0xa)
dup3(r5, r6, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=r0, @ANYRESHEX=r3, @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')

00:13:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0xffff, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:47 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0xe0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa103, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:47 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa200, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x3f00}], 0x2, 0x0)

00:13:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3227.794322] audit: type=1804 audit(1592180028.004:1903): pid=11974 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:48 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000340)=ANY=[@ANYBLOB="080000000400000006000000a4f75d1bb62ad1478f5e56e337b055bcf9633ab15ffb73a5c242067ddca7358052cd8d0de813cc20f4b4289b8eaebfa6e486693adcfbcb79e1578e950c2efbba1fe2d2dc66e476f4767c63dd8226e9f33357fef2be0b234e9e9d5fe3cecc1dbade0e8b57bee337defaffe3422e29cfe6ac52afc8e7f6e90db376ae0162ee363ec4b8f780175222a71949e42855cec5db760524b432ca29fccb55e19da5b016daf72a68bb4066190ad84f2a1a6e8e4a452c4e767fa64dda0b5c0420f73d27ca2c98e98b139f21587a5ef3820ed64440cbd040f1ddc5911821f37b28df74a5518192498829"])
chdir(&(0x7f0000000040)='./file0\x00')
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x24)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:48 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:48 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x25e)

00:13:48 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa201, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:48 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x4000}], 0x2, 0x0)

00:13:48 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:48 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500010065ffff097b040000000000000030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:48 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x6000}], 0x2, 0x0)

00:13:48 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x9, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:48 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa202, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:49 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3228.759514] audit: type=1804 audit(1592180028.964:1904): pid=12014 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:49 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="150004000000000000000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={<r3=>0x0, 0x4, 0x3, 0xff}, &(0x7f0000000480)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={r3, 0x1}, 0x8)
r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0xa0800, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000240)={0x9, 0x2, 0x5, 0x7f}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x28102, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0xcd8d)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000380)={0x23, "0d1a6cd123af56f602b3281687e4d87f6a060b1ca21095af4ffe0fa44efb0f8b0df194c7116256d696ffbbaf72f25e001fd8bfb7ef2ed2a011fddf75a4d5fd8804e51a4ff982e6b479492bc595f9553a8b09e11d3c948801ea7d1467a48afe94dac3209d89db2aa67e21bb3cd27a8281073c6da3bbf190ba5bd77e1590fad63a"})
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:49 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:49 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x25f)

00:13:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa203, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:49 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:49 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x80fe}], 0x2, 0x0)

00:13:49 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2b, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:49 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
link(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000240)='./file0/file0\x00')
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b0000e1003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
r6 = syz_open_procfs(r5, &(0x7f0000000340)='net/snmp\x00')
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000280)=0x5)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472416e733d66642c7266646e7a0100e652c01ae6057fbc5f65ffdf25c2c47a9cebcb0c620bd89376d68b17c93f723f2700000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000480)=0x7fff, 0x4)
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x28, 0x1, 0x1f, 0x6, 0x8, 0x4})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa300, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:49 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2c, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:49 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xdc05}], 0x2, 0x0)

[ 3229.725464] audit: type=1804 audit(1592180029.914:1905): pid=12051 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa301, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:50 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c55edb484a15300396bd4eab5a3e52e3299d340910ee0513f2d1ad80215580f4a94360b42c0650479d7faa32734ff6ef64f0b317e693c9c6773f65fe97ef182d7e8476a56c63cc5269665ef4c4f331f29bd9d7ba5fe7a6d14835bc6f678e0df4709e3d1dc1909a20ed4131096060f747b596bbbf5914c529e123ff7ce9a7ecda1bac9c1ee2a31e210191cfbd49738c3f96b2b069ecd4e00000000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7470616e733d66642c7266646e6f3d6967fb09f5c208a386318b7471ee618683dd75d427292f5e1d23bff345060750f0027a2798d45cc1857a0ab900056c35529183a0000000000000000000", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d4f78caa9a5b5815b234516f5067f14581977e6371fdb2108928586140b1a929a4807e1e9017ea31147f57777c9440c61208c1751397040a6b58b74b344bd6890cc7503cffd2c80128f5df74647ceb668ad899a4940db4e1e96eb8bd150093e20e1dc1f41b1e63ae0ebd9f5ede483a46ac6e7203a010c1a", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]})

00:13:50 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x260)

[ 3229.864945] audit: type=1804 audit(1592180029.994:1906): pid=12059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:50 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xfe80}], 0x2, 0x0)

[ 3230.024615] audit: type=1804 audit(1592180030.234:1907): pid=12075 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa302, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:50 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0))
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:50 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x3c, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x34000}], 0x2, 0x0)

00:13:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa303, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x40000}], 0x2, 0x0)

00:13:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:50 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa0100f0, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3230.805507] audit: type=1804 audit(1592180031.014:1908): pid=12121 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:51 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x261)

00:13:51 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="15000100651600097b0005000039503230302e4c16c2fc6ba66900abe78a12f7030000002fbb6e29b762c31f7a495b016cfba7711b57f840ff667a85cf451fb80e88682fe5027e45a57322e9f55d677ce90095c7329f32528130bf61f49f4797846fa11f7e1e712afd2d8c7850700ce743c878b476ee6783b6125544c1cd02e3416d9e3f6d3ef89ad113a934fe8e315c7645b6a2248208fb6559e100e6d543f3d1532e456c4686d51004faf4170635ef0e7fe255b27f"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000001c0)={'netdevsim0\x00', 0xffff2793})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:51 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x100000}], 0x2, 0x0)

00:13:51 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa400, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:51 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010103, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa401, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:51 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x400300}], 0x2, 0x0)

00:13:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3231.117022] audit: type=1804 audit(1592180031.324:1909): pid=12138 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3231.197543] audit: type=1804 audit(1592180031.384:1910): pid=12138 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:51 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x262)

00:13:51 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010104, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa402, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3231.398328] audit: type=1804 audit(1592180031.604:1911): pid=12167 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3231.466627] audit: type=1804 audit(1592180031.674:1912): pid=12167 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:51 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x1000000}], 0x2, 0x0)

00:13:51 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010106, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa403, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:51 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x263)

00:13:51 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000f00f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="95"], 0x1, 0x0)
msgrcv(r2, 0x0, 0x2b, 0x0, 0x0)
msgsnd(r2, &(0x7f0000000340)={0x3, "b5a34c951174a5356e79a35323778843b84202ca74b4e668247899601c8b3a6cf3769c93a919e74dfa57230f7a083230ddded81edecac13d6b949293b21f6e9daacc679be2d175d71abb4c7e1d5926076e1ed5dc81ca4955608074168ef38488ff5a3df897df24baeb004cbfa02bc99b81fa89dcd0a34502feab6206c925fd0d20f0ff36fcb8d9098269ebfe68efbf7f4565a782a22393894c8c9e67c129f0fb50462995880b8b8932759518bdff05"}, 0xb7, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:51 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010107, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x2000000}], 0x2, 0x0)

00:13:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa500, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3231.765730] audit: type=1804 audit(1592180031.974:1913): pid=12185 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:52 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010109, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa501, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x3000000}], 0x2, 0x0)

00:13:52 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa01010b, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa502, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3232.563237] audit: type=1804 audit(1592180032.774:1914): pid=12227 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:52 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x264)

00:13:52 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000)

00:13:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x4000000}], 0x2, 0x0)

00:13:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:52 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010130, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa503, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:53 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x5000000}], 0x2, 0x0)

00:13:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa600, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:53 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010144, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa601, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:53 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x6000000}], 0x2, 0x0)

00:13:53 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x265)

00:13:53 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010160, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:53 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
fcntl$getownex(r1, 0x10, &(0x7f00000000c0))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10)
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x4, {0x7}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0xffffffffffffff92, 0x5, 0x0, {0x0, 0x0, 0x0, 0x10000}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa602, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:53 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x7000000}], 0x2, 0x0)

00:13:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa603, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:53 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa0101e0, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x8000000}], 0x2, 0x0)

00:13:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:54 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010300, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa700, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:54 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x266)

00:13:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x9000000}], 0x2, 0x0)

00:13:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:54 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000310414c22c58d5f5351239b046b965ffff097b000008003950323030302e4cad3318c730cc1f855142290949e8771e0001cf41d40de429d5b67ecdb3d64b6cc621fe"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:54 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010500, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa701, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xa000000}], 0x2, 0x0)

00:13:54 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010600, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa702, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:55 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/snapshot\x00', 0x10000, 0x0)
write$UHID_INPUT(r0, &(0x7f0000002700)={0x8, {"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", 0x1000}}, 0x1006)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000340)="f396cc3955735dddbd4f48b0aa73c9800a04cca3bca1022fbfa4dc686c78b03ffd212618443a51adb587c45270bc3f9c1ce405d41cb1ee1fd06978b9f334c34216d37d4f86f4febe83613f24921005357c8404ea1404d97fe5818a5e99fb5e97f05795115c03995f4999a321efdfa9bc2d170f5e6cdfb1882a92ef3246b7ec23cf049d10fa9d26de76d9e226439182ec4cc9b6978c012d0a9a508b6040e3a970de0a7ddbcec68e65f212ec110dda13450c959475a53973c0014b38112821427555", 0xc1}, {&(0x7f00000001c0)="32fa0ced6562572cced5dfc825825dd102dcd392eda6d232905554853734941741fe29a203243201ae", 0x29}, {&(0x7f0000000440)="1ca74d02bf80b64a94b9511f28c2ff33e0a6f54cda0fa33015e155693fd2afdf9a4e80852cf595bb7dd2d7141bb286db1e118a1c24214cbd731a4ffd7b62c3946be3abd44546d8952df2f43477ed54498bb91fd4fb9d3a001e48bfb660234d1f1448a2b7adcee3d8deb5a1287c73749aef336f425665188e7380dfa584eabb2c1a961e048dd8fc8441c6993cba47bff353c712f8c01bcc701a35827089fa48773a6d2f8c1a6f3695fdab7c38e6b7aecdf7663ccf8b7fcd5f76add2a2b2b396708aeb5fc73cd99b100674fa411b5d7b7d26", 0xd2}, {&(0x7f0000000540)="223a3811662da132ef4efc52631b745987f92085ae6dc29fe146acd5ed724a4f29fbb35a0b12c3e48111b18e9f2277e14e6421d20f715a4b9c72351f0fdf249e19f88008bdb8a336164b716acf57c7506468fdd4352aa483c215c8e4f1d4ffc73f7bce88f79f477950c8e69fa34edda9a2756475c6bd03c61b7c6493d640f08ffd1afd5662e0c83fa13d0e52f2c24968b1ba6b04d55e01011949e441b5e181f72a0aaca12827664c9c45f47f9fbcd72be35995d8334fe84b1e342ab94e40ae623fdf85b10b06180af9f9e3dbd7589c2fa9af3a9dda92ef76a44c3c5f4bb8bcb681192eb9f63dd00f48ecec2a52fb5151d364feb2e1000c6c9e104b86c81ffcbbcad539e4aaaa95e921c51aa99435e65fc1d4c363a45560e7e9dc71cb57012b6ef6add7965e909405306333f99fa30ad75157064eab977303c72a8190991dfd46a8ddca14e4fc836826b0b742b5a355cad78db88253f5cacc5758c0c63f8d81fa4a715563378c567258a2deed674ea601a3130dbc2fc9d1d8cfa54e1dd337661fa8cb186799f9bfb1a1514d813a2342b010b4649110b4fff001a071eef9e70e247754eb80e52ac841d4c8287e903666aeedbfc52a74ff3b82ff2221129029d8fb4d301609f3824c63aee2c9959cfa14f3a91774b3a3ff3b8ff74d436f95f72c98cce3af58e599485099f26b51a7ed6f698564f10c6f97664c82bd87dc5dc13da7b7ecf37233c0a59057593d651de6248a94c6597baa43e64f30e0b86d71a62da77a8e45dd9826c6e9e23254ac39878d46dd2d42d542dbc87bbcde312a60dc7296571eb67cfb7e3925b75d9b0b7bf9e5392043eed188de3e9fc5a12dddcaa8867705109f1fb0f528ba1a54ab24e1b3e608f36bf604d1f92b37b90477cb60b29ed0fc576d19cef3ad53e98034ee404b19b584c99d27d9f4455b23d6715c605fc25ca990bc2249b3ea163c720a4146c037728c752920aa8aae8a569dad1a5390fda52abc48bdcabb798c4be5c2c4616ed37b71b1a5ddc6f64968e012759fd68d8a120ea66ed6936c3edccd059f3531de5fdd5337e885b7e79b62997e34213229e59a7432061a33d5e40292773c269835ed21004dc427c11c0cc3c481128ca6cc49636919786581c34ddf4914bc8fc50dd6d756b42b1f70889d6b361f929f64f53d0e5f0ce6381212ea1167a9098325b12e46fa56d1987c07ead83603e4632b78b5af0e5927987b1ec75f64df4ac113b107484cc874437410dd12968c2002250d21ddb6ca01559465ff5c9becfe176f6b8aef2702a519b041f7747d6b11ce0c3d91c1924fde81235d5d6b0bdb182600b52a99e9621210171480426efd384acec8ba82e3e1d860ad01fd072d348a1468f991a1b8387878869b944831990395fbc78e7b4689193fd785a8eab92d94b0c3193d9ac672387e8a935d407c3ef4991d4002d6323eb8ceb08028702ac2fdc55899d7d25a395c7a196f58e325b389cd4f71303a511757b7a90e80baa58d17af87bbc0f27bdecc1c64bc52452c8c845186f2a6a2ba050d11b8b9d8375da170398dd35ec273511855d0785e6cceee8567446258e532eec80458229841327468014a5002497668d4d2db616ef83f1d4dbc68405882d691a60d6a3afabf44eb385989b353ff0af9a044305de1bb3bcc165ef3e101e10ede7fa197ea67aed218778cc7f177b1048020676062fd220d39b8e3ce862d2faa8981c3053fce9a961a221afdb5d1aeeedae6aa59d939b60ca400eac706c98ef82651476b33ef7dc9668843e0147c1245e4b1f3341ce1ccc02b89f4108575e62b8395823275aa9ab2877f3a5a55b28f4b5b5f63585e0b7e0dd8dc5055553f018fa2f6263693fba3c8e778eb3c23eca2ecf7f41daef37760cd1b2ced3c11cece99e9b56088a398204bccc2b530e6d0f9daa38bc5f8541b71b592c3a362726ed3f47a6b4c2bb47af0e30b151d9c31835933f6158a2064e65cc345000fce93b36b63efcd56952941b70dfcad12c93e17ae3702b1179507a530ded68b9c4ec7c2b30bf131b2561b6f486444503b0f2128fc37df76fba982c39db1b77ba2047ca1850a2c189c8528c1620258facc94d6ce7af81eccf5d3e2516526b61c47281f928779ef307b105935d4a20abc6f5651f6f0919d40028962a86ce9da35948172d60f612466d5519188eda8d9518aaa3a1e5f483e94ac96b2b71897ebd14e0214d8967024bb0d64556538b398ec454ae7f7f83a071b7dc2cadc2d3ccc7d73b3ca9f322b0636cba357dd318d61cbef067aac9541d16840f4e6e4155e3f65e0f633bc023892713b4520c44534b3571c3d3a45c80c51f485bb83979fa46dd9658fcc6cd5708aaebf98a01f8ceadaf487cb8e852f4a300b3213e86e6d44914d340570e0d2b4451369d06d3f03d24f101870ad8a36042447022ab4873d37eaab949e68075aea00e3ce1e41c4f5111ab8c6f306c618eedffef4fef420017f5014620ced58a40b9f2b3630cda296505f10a6fb7c1f9d80193361d8f11471a1b968af51573304cf103ed8ecf0117b846067fc86f823db90828bc6374eb4952661bc2010d769c9e8ca0199ec644d4e33b906cf03d4c2c67157cf15e69e0c71ddb482b44c1376ef1f8b4f86b0b148a593c50f5e8830dce417dcfa6be885249e5c1756db757c60d818d6539ab59e80979dde7abf35a9c2085e98f6c999519fd21d1103ad727c3cd46b03782a18b62760871c5915887b6e59cc64a85db20f00eca717c83099995c1f19ff9094d6ac08b93907467e1ad56abb75400a0cbeebdff59695f2738bde807fb0707173b7a5a56b494c0848c622c23b51ff8a0433049e873a122a8759a7722907bb36941e3fab2efd2c63dea0249c90a6bcb6c03ed6fe806ddbfc5e6ebd302b8fb2cb8a7c473a79b5f1f578d179536be3450ce85aaf8dc33200036c79287e2e07a91e11eff8b0b7ee212d51f7de5262e7b5bfd57c3dca740550012fee965b3bb6a2d2df6e1c73af7c9923d8054204078d608ed8e9591e3180c85991d05f3f3e087db14cfc7072cc77aea1001694dba916ac82ea4d6db717826e2d7dd40d3f332d1aa55b1fff89536a0a564d94697576dc86803bf5f4e3632c04900ce027ae9a6003304bb58f408d4e7307cfaa462e9ef08140857abac167f99fe73cb1d7d8a24ee67b502d833014a8eeb22faed0a68dd0a5f52df64f454ad922b1971433f732c5ffbf22a4529088622e9af515dfd6bd5913ee497c8cadf0bf4b61684e81f751d5ba26862e7ed9d0cf7ef46c0cf8f4354fd6b5f63f04857164618694e1d8d43e6bc7142a291fa59fddebc6f6733f406c0e069e1d0510f930070283393e4f835d0112ecf0a31ed41ad315f6fcab0d34dc54ea03aad0838d1468e44975303847d318cc387bc8fad4a392e7c5e089f33ad0c09443e89ab006992d34ceb1d87f5dc47318466f4f9bbcead1893d305197d4b18afc2f8cf92b716707edbfa2610a5895022b0d31ec3d9a77293c62183cbd0cc5765b6e18d0d92d9da5a44e7c4b0b1e4774441cf524fb525e45735f1ce573e0363a44b015a1cd564e25ab9b24aceaa5119148d00ee31eafcc6632383a12838dc4976d5d7132a53f37a02a5e348e71feefbdeaa7c4f58546e6f705c97b3db83d6c91dfc7e5710d736f66c2f17f4b8d77a5a5c1496c9be470cfbe6ca94db6a313253ef5cc482ec7a7dfb10872209de6694828449abc5cb13ef75d6ae1245edadf2a1ab7d32ac6a19f41f6cf7465badc38c38f207480f20afd43055e5d1aef84a32b1924b4932a56be06a395533f080722417adfa533e04b68f4ba5a85c5902ae2447933edc3ac190fc13ad2b92cc6add38a535cdb9ea96cdbed002bc6c4e56512e6f59003f68b0a6e1a4082cd32787cfb154228a76a8843a6a54b46a5641027b535f4f72e6a63db13d5cd72f0332a25a70d50e09fcf142b20c0597bf9308d226181981284c503c781dcd0f63e1862c11eeec7c7b9120173338daaa7fa097abd0fef71fd6f227fb7ec4086de427a53165b8b530c30f568a2211b5e18f19f50f21a484a9bee40bce02e49f27004be80aed5d925fd18719abf50090d4cfd87ff74a3c25b168e174909a2fd42bed22fa6552bb5e5413d01a8a0716fbfeb3c815daf11889a4416b384787c61a48cf23ef3c3c20ff32d4eddb3d0f59bf26a8cc67e4874304818fcab43da7c6ff73e94c3151488e357652490e28134e2d731cf653afb8928745707ac22378143d249a0f6fd2c392ab22e0bcbf15fae010105635726b24dbca98610421b8fdcd3d919f77ee46eec294d3b667d0520c6e45e0ba342cbfed73109806c99fb869227ae181e5a3be6b763aca54470029d3faa18320f7bd56e86944935e08aec2f10d831f9244614990584338ef3931dd11631b3e5fb28ee334c96d00321d2c2bef147c7fa3c9e8af504ab911aa9d25e6bad957b2aaa17420e726d47826e4b16daf7f0346c808cf9fd6360ac03db849c90f099030c3a10e8e3c2bc94ac26af0f1c10d731b16b870ed454b64ae4b1b298f4483ace4ed9a9e107e80005bf757da55aafa7a4648b2aace7919d75e3d5595d81d1dadad863f39ef53ea39b2a90ea3182c22ab14c968a4172be1948e8d7fab71f7a87a22f648f7aa158524e67c13621af66529755446b5f48f4c79b4fb9f18e8483972e5fdf88a9c6b2665d3bfe139714e101b717376aef9e892a8ee51f1606d673935274dd04c04eccadf4b09bcf7b71b77f2de66587f7d183c9bdf0a068cd92d45c1ed75e356ec9cef97b62f8566f30a6e3a4a419254e95419d7670d336fee27f4ac2c02ac9c0eb779cbe15dfac9ae0477d8bba430dd860fc3a3501956fbe4a67a2972f75fa4909ecd55d1c255b3b88d0777746868e26446f15c9c5a28f5131376eef2351bb79281d9e5138256e93c73e3aabd20c5a57b7e00dfd1d30103cf564bdf3a1ec8a9e50aaecb404fa1e63ff7e1498ad080948caaa24e4d92c398aa2f28216eecdf43952fb585e5f9c5c7334801f13946d57533db04b809d457406174b59bc231cc3b4d3793ce097fbfdcc0af37bd5c323f49c32aa09cc81cbe194cbf7b933877c716578c6fd829592414d871a45ddf36bdb30fa787fdb007c8c2f2972b985913d8b3a458d2d4fce33bcf8aa66ae76165543a35af31b34e2e0fe76361505ef48e6e42425c74a1ee30acfbd910a2d63e11b66af774f24410286e24ad98b60b09b36187b5ff54570158b819ecf22999bbc758a944e8d206350b0432d51ba845d726f75c273da4019eb98644d4278fe682cc1dbb17ed4aeb8fb0b84d9405cba6456ea4e68ca2428906b6847ea33e5992a732de58802b056ef8f8896af54988220d3bdf1ed0a873fd10b883c559a7a24338175dbc98d09453d10123451bb6e4e6eed3d4f5e3b3db50af61aeacfb6beefbd484ec9ab4570ef1fb5f1587e9ee4ce5338b7c1e9dad546345d6bfd6357f6a905ca11bee424920fe6598f4960c80ebc754183e67c884dc7e69c369e3c967b090fcafc9cd42e0c287c09bfc1407b41950d559ffe0955c0505633f577135838cd1d26b2d682ad5055303df910a630245da241e5dcb47b2443d4ddd101530158b94615222eeaff28b236117e5814732b4170faf1e354624809825ca71f74d4345f297698bd0b031051b0ed229647cd8d3bbf93f582c6281a92c398a7a56421bee874a763c2af6505592925db279152d57dc89f6e76ee75d70d7315ebc31f7fcb10c8a762e4355d205004739ada6d8d086a47853def04e62b5a7e627ea5fb8ff51a217a4795063f493a", 0x1000}, {&(0x7f0000001540)="56e03373b190a9d2ec19553224f31ad45457fdb27d7b5c42ff8c94ffba1f6096f5a055d90c97d2be4a10e07cf06e82b6027de1e82251e299d6232dd4cd642b113db587ef382d2b8eb1704d6aedc077068ccc34f7165930493b30b45f8dd122158a420a126b549a98184f49aad2ebc27f4797c07602510d1c16d62dfbff43506a012bc5bbde4a83a15c73772c778069cd76027a21a158c63d943e477e7deb635a1e5689da24a7105bbce3d34e2e35babddf2752faf11ddaf9a5f9154c5c95497af17ef0816e83abc0de21a4ab756eb4a679f7b4eb70393d2a02c57b953b5e23581915da042883371d2457109d3a3b9dd7e81ce68b70960960ee6dd894e45589e658e6584959700bc9b0602a68d9a63c82f189c5cc9d25bd8f5aeec9ac21b47bb183a8f07fd351384d2f0a13d3d0c5a89cec901a790d8e0cae87d71926b90081b607bdec30560f8f32f81261e3dec37e16e0f37476ac807bf539f6e13c8aa2b1d0842ab1024b4f10f2331606fb93ea3c1f78e139b3183665587d3ce158912c7a0cdf0fa67deb44d4f4999f23f4e19c7aefa697a7cfcba84720758b809fa881402b0ef243102ff7f7c447eafe97d5b1e1da6d778e57f74a5ae6de6934287e6c2fcb630f4caf9c3202b6ae211e59203a674bcef3d7aac784a6d9abde4a56e186ed0dbbed23f65c6b2a217e650d8518980643ccee4a392d9f1cf5282768624e275d331fb5aa214b038b8b2716886b587cfd2e4b79a440be01d3ce7816658491fe816414445e43953d94347dcfc6d72036a03fd0037301477bb31d838d2b64d84360830a7a9885c193cbfcb26e0374a51c7e26b297b30651d1572538385b9cb71acad5f6146726075653680e8f28062fa477062882dd2e7da791107ec815c01af48132bfcebb454bebf4af695eb8d1c613e27d89c1f7c8cfceddaa18c673f0590dadb8a42e86e0fdf636f890c3f66d602087ccf743e95a69604133f5fb498c69f7c66b1d7889faab92e372352714071340eb766224864e00aa4f198ddc1c1e9d71a4687794afb5f54b25034c220ac1d74b54630f350ec54f22a8bf5fc6e38b707bf2249956c86ee13dfad8d8fb75979709e43d5b71b09b3f25fd30853d62e501a1f7efad3bfa13c369c2b2f01dc1daf346a5fb5bc92fcf7cd36897faf9650236438eba54ab079c857f98d875932a65a0751a489ff106091bcbf3b96a8b02e7ca2e02d60d0ae00d775d9a088563a03442f39dbc5ebce0054bc5e5ae57d83c4abbab56fbae1901b180b6f5c11a929be586c3916dc2da48c9d357997c87828472d247c9ea3b76f24dd85e00d6bd79aa52b4d8238eab19a4336178eb70ef72ff801012f00cf7a94534a97952754afcf6dd76a6173e4d562ba13010ea61ae167fa5338e4ccb8609a17292d59fe8b8b1d1fdbb17614bff1f637a5d3c6b9b8eccc2b3431777635553463ebc47e7efa95e5eb93c5256609c28adc0b93b23d8420d24f404c7d4484ca8214cce41dcac51a496831f68edc5e384e6c2976a426d903a74a361e05360e97fbf8b3aa7f4e7fc087e7d9a3c875ba89ee4353ba174c1ffdef5788dfda93afe4a13510da7571bcff2f75b64c85d4d50b24a9f0e4a2b131eeae73232c458b100bdff7643dffa637d1db05c815cea26fe221a492c34d3784e46f67428e6469ce75b5f095c9e544bea8af62a8e516e7b81ee7d431f3083390e1815616c7fad19a2133fac8ab5e0faff18782f258718188ed4d8c3dc3b89d13d5fbc11d2f7d8d70d099c768d24c053bf67e846b8160cd68c7dd271417080b7af2ca22a0a69cf057986ff60719435fc5e843922d4cbe46fa63faeaf9efd7adceaf3eac7b102bd73d8252258529cae590057143834ef3d376cd3f722f71d5a6a886ec334f5c4d16459923adb0dbd6d8f909bfc4befb6446396f8440eade36653ade093eff98d6121b1700cc673357a4cbd75758d82723b05abaee552760ad8dd5832d8f8fc5cb70a884bc60e09d1fc1c31dfc5db78d8c0b47b2f8d7b49ab76f45de320e6a010163ed206bfa0c8c40c480c78ab96ea432ee68ded647ad55058bed6ed72c15891287c8562fbf4a1b938089caf4d5855093b0cd583198a71706337d23c6334db7b82c7319085587ad1fca464d94542d564659bb155d270ce26a147d644daba8e8200484c7ecbaacf42473d31597e56022df77b1f1eb961d95c04246e5e054a34c4d7db18ec745829f172c4d8e1d1606ec8410bca04c753693cfe5c6f7ffc47c681bac4400e4689f79605131b596b7e4b5610d183bd0c98187958fb5c524f3f6366199ab7dc36015594d210b10c99cf414feefd495f30c502970ebd59e169795556ba88adcdfbb39353b62a81efb6f860ea229a8f6f0d5d784c3f8d56a58326bccb38a9333abbc8233d9273fddc61bb23276bbeddb63cfa423c850c2602f13994937e2c30a03f71222c6b28b1ce48d789b6de782ed0010a3ecdcd56f384e1801dadbb3bc9d4f95c6a6bd3e1558298e490c5a281ea4cd9b18d4d4a4bea5a4d6e281c004cf6115f2f0f23728bd2cc6e690cfdfe8137c9c2eadb537b555647bbebd5b047998f5eca4416b957043de78d2bd14ddd66b0f0af5193b3c3b02495f3a45846a04e14677b54772990bec457c6b55ed3584741137f87fa784eb43fbd8376e71a5c8957831e7e2c4d75b6809674230a48d5bfd9658cd5fed071bd049cd44ad1ffc3c7236cb78262b0f00e146e1a9e69938d275ba4eff2d0eebd3e984523abbd324e7b2dc94a1b1be5dbcf2952f172dc002ecea2784969ab8a91405390cb5a4984481d2ee97daf30bd8943819c9073accf9929db16f2b57cfa09c45a89c6453340c167c3f4de0bdc3be9fe36b85f5958de61366b57504207e16031c4756938f4a6047587a9eda176999656c496f137b257028e3a5a8c347f67e14979458dc7fa347984e433bd64a4135c1705a39f10f511bc1d1ca8e93bb479f12940a01c68a754140ff635492a23905827896ad7c808bde152a4e7d74a7b197166039e1254385e1ba5c60dbe4fc941b57f0dbd1386a4de967ba811e5f7db3172e41486e0a9e8e223eeac4ebdb5c671954a9ed6fc4213130a8eccebbf21bf610d5f8e11b5e1202357ce35a12ee789d601d89803c36f02cd03d2393a61629473e13722799255d8f59ae6abd8799ffd7e9b434cec600daa3782917c5faf7f463f7ae324eb16e5ca665746f6d6ca860932248bb41182272f56db50d6d15256571bc940a4b9df1b2590889571271f74809a555d0d25318c606065e12bc3a42fddfca6bd58b6d086cb3084332e79ccae61eb8f9317c11d177ed8ada854e63dfc31726a509ce623bdbeb14c86f2160454a7875b46acd985ac2e4ad5fe5cd0e7d6776ddb4382d6d800e40909d8630316e66deda5443372081e5237e0536f89f899a244970bc6c8a9e937eb7825d97255fcb13235afcba2b1b1f6c649d3de5c9f51698a21b9df927a5488b3611ff54840374b4f1fd1b755c713b4786b99e1b428295fd78a41951b7aab8a5e575a5657b88eaf092a62ce979c9d9daeb5744b37ad776f6f3b9fdf2137320c6dffa5fe34e1112f364e8f513f897f78588eb3ebe6c99a74c671bdd0d8bc3f597ed2091a20ed6d3c33ebf293962cbb1c545f2a0dba90cbfe12daa8edd9807a11a87d94cba973d4ed663f285ae82a7c55645a5f49212f48a96aafea1ddd0650573f3f719d32f11a371b71a008fb407b9b1fe7b8dd42590b3607b91fbc1611795333bf5da749715d700ec49fd9730e8b58e7974433ef38964d4f361e8ac13a0253cbbbc4862ced9cacff5c9caf65d99efaf30895cdc3ae0a75a25c7550e70b59050ad640092786c3e2c1b1ab23b75a82116a050506cd93bb50bcb62270c9aa0072d01d31a6a003f26b155698ffa9a21e8a20d9ff6c3c4f93bf22ed3fe8ae40857fc09c61c309ec74e904b9da75dc634a4517fccb91bd55a1733d95dda00620a9a3cf26c35419cd5371769f09c19447be0d5c510b437c8381e11e6b0d6b25eb05b1b63a0a02865a8e49995527954ee62ab2933afaf37b28b9136749641370cef4e3adab513613a7387bcef664fb9f0436a7338f1643ef894836015c155ae717650c23b559e0fdb7daa58b64c645eea271d9b815eb214b794f5916cc1d56a9fad9bbdc1ac6beff9e9981dce24ddfa7d8b8db00740fabc4291f0f164ff883d223974f477afbabd1175592d1e9084ed5943aa3da093210f1fefe30bd043482fcb83f8c1b4368091cb301a8f501ea9478e8fc3753238cba9f39a63602201c61a892d90a0246b371c13800c5f4d2b9e19a5f374cc9947bbd635a56fe0bbd996cef31ecfda636f114d1f4a1f0920f4d32671ad5220e6808777d432d2afbb834253b3fd11d64b7a863fc0a338b0c8139a408c288b4672b8641b0fec9fe85393448cc80f397b238382ed48d58ef62f69ba39df0464c7160963700ae1cffed8bc63cb7df5eb4793ca937305dc67b21f3efab87a333ba6c4dc21470c9b5ec8033529fc568b31a564ce094942066b6993e270680254f3e163c64e7ed48470431c7002be6f830f71a7111429cde613b80b758f4c34ebeb73700583d05dd4d5c4bf0a51e604fe76d6337b17b824e6e0cf55ddea8908710262360765842b20150df138babce7b3bc8f217a9b9a83ce6a5939fcf823a478dcd139813771fcbaea2216a23a1edf4654222099da344263c17b0b6e151c772435703ac3cbea78d455da7b57f17dd678da540400fa87a6fae428193b7dec859c9f2f76323e4b28fc955794b6ae7e58e424951c9ee8f2e25e7cdb75fae10ab17c50b947ec9f684750095853f97a2c34694157334b5b005531f939ff74c5a8476ecba05847f26bab13fe5e62f5f14968c55eaf47650486eff134f41a7c9a086ef1b465450405bbc4d34ce00fd5297d47409fde96772788f26c315fa95c29f2f1c9f638731b400cce414629796123f0b295ae26c91e056f4df83d8c1113693c1d229a0824e58fdf4d1a885d912b388a26a43ec41ea1e75f7dc34de332cf3328487563c3c02c26de3c84bfcf58c22a2a6d196d4480e43e58e755d7f8c2ab8f8352797404b54198ea14256fa1ce438de0907ff5e9a6cb65972a8363a5f914af8ffd99fe0c9cdfbaee220a6b0639ef55f71a264cc38abd5e51cb255be27322d05461cdb0bddcc8752ea8523f38b51cc9e4298156c4186929bea256692a4d372ffbc9869a37d7bab33f3327d1b4bd41c879a56935072ade77b30ed3c4b671fd468d71f40bc157ab8014637fd988875f095217987cd7f8d7f14e8153d96c49ba0ef881ac07a5e809e7226ac26b1a1c1d2797e8ed1189f3168e45e93603656864199e33ee3c6302ea5501faacb030c13b0fbfc75ec80ed63e2ed1e5b8841c4001833aef2a85929a5d10cbe3fe165a53357d92ab47e71ae4d455f4c4403cbb44d80e6f06489ced4a04c49c3dcd1a86f324919481d94fa77fdd09cdd104f4c58fb8cc965192d22bf10c5f80b73f9154eeb3c19743ba291f87287a4eac8c63a5033212fa6fe7077644c22f5b1ca5577284ad31bf9ac5ffd147b70cb78279dd4a96da2931185ef18187e4539282f830d4724ea4f674a3ea9e38c2426a3a174ffaf02b2e5e164488ab49591990bfa43b597d106b9f6196891850409e7272e05b5f837869bade6841b4b4983048ae8aac3d65c3d64361c2f34ae1331a4c6463fc5a8ed1c56f06a49d69c1f5722969e784765b59bd8263828d83d8177135033f90cabd5b436ea17bc41d12dbe9f3a5229883e1698eda8b7ef92c09b1d", 0x1000}, {&(0x7f0000002540)="55dbfb67d387f6ca1805a2634e124460a79a62c78d8b104a47f55fb4f6412847b592baa5c50beb71bd1749d0fac46e8696285e0c832e33a8066e0ddd86bcd53f512c42411dc1a0ca78de94bbe06a6c36c5bbc672d5c7013dd2b885a832b06a0f49e1a2e143094291ecab522e0a120dcf21b9b8e24bab9b10e38984cfd8b7e15e6a", 0x81}, {&(0x7f0000002600)="1dea28062a0776df3b07474a52d79da4622387453081368a7aae4c60b86be8c4d64dd6d124465e0c56f46d4a219106c4d5c833c252c6a1dde46d2af17b4f96485bfafc9fbfadb05a4725d643618b99c575b6ac84bbbb84849b8710d3e9e066391e72f867f43e52f683bd4b4dcb82829b6bd5b072e53bce5042a7b478e9ed23df06210769314d135f0e440d5a33f69dcde1", 0x91}], 0x40, 0x9)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r2])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:55 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xe000000}], 0x2, 0x0)

[ 3235.440919] kauditd_printk_skb: 4 callbacks suppressed
[ 3235.440932] audit: type=1804 audit(1592180035.644:1919): pid=12328 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:55 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x267)

00:13:55 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010900, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:55 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa703, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:55 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x10000000}], 0x2, 0x0)

00:13:55 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000240)=0xbd)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x40400)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r1])
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000340))
close(r5)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r7}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={r7, 0x8001}, 0x8)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:55 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010f00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:55 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x11000000}], 0x2, 0x0)

00:13:55 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
pread64(r3, &(0x7f00000001c0)=""/9, 0x9, 0xda)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:55 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x268)

00:13:55 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa800, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:55 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa012302, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa801, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x20000000}], 0x2, 0x0)

[ 3235.858334] audit: type=1804 audit(1592180036.064:1920): pid=12393 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:56 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa013f00, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:56 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_getoverrun(r3)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa802, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x3f000000}], 0x2, 0x0)

00:13:56 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xac141423, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:56 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x269)

00:13:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa803, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x40000000}], 0x2, 0x0)

00:13:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:56 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xac141429, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x60000000}], 0x2, 0x0)

00:13:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa900, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:56 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xac14143a, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3236.730493] audit: type=1804 audit(1592180036.934:1921): pid=12446 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:59 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$P9_RUNLINKAT(r5, &(0x7f0000000280)={0x7, 0x4d, 0x1}, 0x7)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000240)={{r1}, 0xf958, 0x1, 0x5})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:13:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x7ffffff7}], 0x2, 0x0)

00:13:59 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local={0xac, 0x44}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa901, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:59 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x26a)

00:13:59 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local={0xac, 0x14, 0x44}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3239.416020] audit: type=1804 audit(1592180039.614:1922): pid=12474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:13:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0x8dffffff}], 0x2, 0x0)

00:13:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa902, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:13:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:13:59 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:13:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xa903, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:00 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r2, 0x80047437, 0x20000000)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d35c1a80b98a53de3e863bd1739eb282ccfc9c2a5bcd5a6b0d625fa7dcd9d088013c6d5de927b70ed036dd89f90d3b8aed02e25a62b29b04deee6baa08d897f013140491a52d03c5ab332000000000000000098b4932265db8a6b58d7b476c86714d8fac478a6690d83378d0761cf5227e8c1f65ecf66b1cb35709969c0dcde056f6fa59e7ac41593febd43a94086192e96024190b66f127f79394dffdb2f3d95879c9902d8658164dec68fb5af17183e4f7ecb8a23ab38287384903e931af4383ff58017ab7e32b7e5d95dd8b540c1efc7c21265cb", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xdc050000}], 0x2, 0x0)

00:14:00 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaa00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3240.223110] audit: type=1804 audit(1592180040.434:1923): pid=12520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3240.249831] 9pnet: Insufficient options for proto=fd
00:14:00 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x26b)

00:14:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xeffdffff}], 0x2, 0x0)

00:14:00 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x6, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaa01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3240.286341] 9pnet: Insufficient options for proto=fd
00:14:00 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x9, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:00 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x600001, 0x0)
write$FUSE_LSEEK(r3, &(0x7f0000000240)={0x18, 0x0, 0x5, {0xffffffffffffffff}}, 0x18)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000001940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000003c0)={0x1508, 0x1, 0x5, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x1}, 0xe, 0xf7, 0x9, 0x8, 0xd, 'syz1\x00', "a6578452493d7c37275c8dd813a13498e80765db2eaee3802b41e72a33728b4b", "92a860442265c4d76b9ddfded21ad643b199b91a0dba29d507726bcc80e1e10e", [{0xf830, 0x1, {0x2, 0x78}}, {0x7f, 0xff80, {0x3, 0x80000000}}, {0x95a6, 0xf6e1, {0x1, 0x2}}, {0x9, 0x8001, {0x1}}, {0x3, 0x8}, {0x2, 0x3, {0x2, 0x5}}, {0x499, 0x4, {0x2, 0x2}}, {0x0, 0x7f, {0x0, 0xffffffff}}, {0x8b55, 0x1000, {0x0, 0x9}}, {0x0, 0x20, {0x1, 0xffff8000}}, {0x200, 0x8001, {0x3, 0x3}}, {0x20, 0x6, {0x0, 0x4}}, {0x4040, 0x2, {0x2, 0x9}}, {0x631, 0xff81, {0x2, 0xe46}}, {0x3ff, 0x9, {0x0, 0xffff}}, {0x8, 0x101, {0x2, 0x8}}, {0x5, 0xd7b, {0x3, 0x81}}, {0xefc, 0x1b7, {0x3, 0x10000}}, {0x401, 0x5, {0x1, 0xee8f}}, {0x11df, 0x5, {0x0, 0x2}}, {0x5, 0x0, {0x0, 0x7}}, {0x800, 0xfffb, {0x0, 0x80000000}}, {0x7, 0xfff, {0x2, 0x9}}, {0x1, 0x1, {0x0, 0x8a}}, {0xb71, 0x2, {0x3, 0xf43}}, {0x6, 0x9, {0x1, 0x7f}}, {0x8, 0x1, {0xc9a81283fbe2e143, 0x101}}, {0x81, 0x9, {0x2, 0x4}}, {0x3ff, 0x7, {0x3, 0x7}}, {0x1ff, 0x9, {0x1, 0xc7}}, {0x7907, 0x8, {0x0, 0x6}}, {0x6, 0x0, {0x0, 0x6}}, {0x4, 0x3ff, {0x0, 0x5}}, {0x6, 0x0, {0x0, 0x4}}, {0x7f, 0x7, {0x0, 0x3}}, {0x4, 0x4, {0x3, 0xf49}}, {0x6, 0x0, {0x3, 0x55}}, {0x5, 0x81, {0x1, 0x8000}}, {0x0, 0xf460, {0x1, 0x8}}, {0x3, 0x1000, {0x2, 0x47ac}}]}}}, {{0x254, 0x1, {{0x1, 0xfffff556}, 0x3e, 0x2, 0x8, 0x7ff, 0x4, 'syz1\x00', "db99574024993fecf29bdde4325ecfee4cc19f6938e4d6ef980628289d0d2959", "eaf0264824fb493b7ee46a33f49c05e0433ce3d4bb7162cc2e97e9bde5ef2bd8", [{0xfff, 0x401, {0x2}}, {0x7, 0x4, {0x2, 0xdf44}}, {0x0, 0xf000, {0x2, 0x64e}}, {0x6, 0x0, {0x1, 0x101}}, {0x5, 0x20, {0x1, 0xd04d}}, {0x4, 0x7f}, {0x1f, 0xe3, {0x1, 0x727}}, {0x6, 0x1, {0x3, 0x7921}}, {0x8, 0x4, {0x1, 0x4}}, {0x2, 0xff28, {0x2, 0x8883}}, {0xd61, 0xa69a, {0x3, 0x7fff000}}, {0xd1bc, 0x7f, {0x1, 0x6d5a}}, {0xfffb, 0x9, {0x2, 0xfffffffd}}, {0x46cc, 0x200, {0x0, 0x81}}, {0x400, 0x100}, {0xd2c, 0x4, {0x2, 0x5}}, {0x1000, 0x9, {0x3, 0x945e}}, {0x1557, 0x9, {0x2, 0xa9}}, {0xfff9, 0x101, {0x0, 0x38}}, {0x8, 0x6, {0x1, 0x1}}, {0x46ff, 0xc03, {0x0, 0x573a}}, {0x4, 0xb, {0x2, 0x1}}, {0x9, 0x8000, {0x2, 0x5}}, {0x0, 0x1c4, {0x0, 0xfffffffe}}, {0xfffb, 0x7, {0x3, 0x4}}, {0x0, 0x486, {0x3}}, {0x0, 0xffff, {0x3, 0x4}}, {0x3, 0xc140, {0x1, 0x49e5}}, {0xffff, 0x5, {0x3, 0x3}}, {0x0, 0x1f, {0x1, 0x3ff}}, {0x1400, 0x3ff, {0x0, 0xffffffff}}, {0x5, 0x4, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x7fff}}, {0x5, 0x6, {0x2, 0x4}}, {0xafeb, 0x0, {0x1, 0xc7}}, {0x0, 0x5, {0x4, 0x80000000}}, {0x401, 0x7, {0x2, 0x6}}, {0x7f, 0x1ff, {0x1, 0x7}}, {0x1f, 0xbc7a, {0x1, 0x9}}, {0x0, 0x4, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x659916c}, 0x5, 0x0, 0x2, 0x61, 0x6, 'syz1\x00', "ebb9500729d58ca25ba8a51aea5030f4d2274d3d2c7d97128e65bbedb92a814f", "ba7da2dcd6250e04ebb4afecc1208cef1ba13007deaea42a95ffb373dc730b1b", [{0x8, 0x1, {0x2, 0x8}}, {0x200, 0x9}, {0x3, 0x6, {0x0, 0x23}}, {0x4, 0x80, {0x2, 0xffff}}, {0x101, 0xf50, {0x3, 0x7fff}}, {0x3, 0xe6b, {0x3, 0x69}}, {0x5edf, 0x81, {0x0, 0x3ff}}, {0x0, 0x2, {0x3, 0x2}}, {0x101, 0x3ff, {0x3, 0x3fd3}}, {0x8, 0xd31c, {0x2, 0x3}}, {0x2, 0x7, {0x3, 0x20}}, {0xb14b, 0x8000, {0x2, 0x5}}, {0x5, 0xd5c, {0x2, 0x3}}, {0x80, 0x9, {0x3, 0xffffffff}}, {0x1000, 0x5, {0x1, 0x8}}, {0x1, 0x1, {0x3, 0x400}}, {0x6, 0xf8ea, {0x0, 0x77f0000}}, {0x8, 0xd8, {0x3, 0x63fa}}, {0x0, 0x7, {0x2, 0xffe}}, {0x5, 0x35, {0x2, 0x8}}, {0x3, 0x1, {0x3, 0x5}}, {0x0, 0x8, {0x1, 0x3}}, {0x100, 0x81, {0x1, 0x2}}, {0x81, 0x6, {0x3, 0xffff}}, {0x1, 0x2, {0x3, 0x6617}}, {0xa96e, 0x7, {0x1, 0x2}}, {0x0, 0x20, {0x2, 0x5}}, {0x7, 0xc95a, {0x0, 0x2}}, {0x8000, 0x97d, {0x1, 0x2}}, {0xdfa, 0x4000, {0x3, 0x1000}}, {0x0, 0x5, {0x2, 0x7fffffff}}, {0x9, 0x9, {0x1, 0x9}}, {0x0, 0xfff8, {0x3, 0x9}}, {0x7fff, 0x0, {0x0, 0x2}}, {0x7, 0x8000, {0x0, 0x8}}, {0x8001, 0xfff, {0x0, 0x5}}, {0xe1, 0x200, {0x0, 0x8}}, {0xfff8, 0x7, {0x3, 0x200}}, {0x7a, 0x81, {0x3, 0x6}}, {0x1, 0xfffc, {0x1, 0x80000001}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x2a, 0x0, 0x0, 0x3, 0x4, 'syz0\x00', "343c0be8a425315bc25fe4a08b3a9457255274c784ff633e6335d7c42580c98e", "05921ad7ae33f6c81cf966c07081ee08f5eed74c41caa0c543c5da01d949b2ba", [{0x9, 0x5, {0x3, 0x7}}, {0x7, 0x6, {0x0, 0x9}}, {0xffff, 0x2, {0x3, 0x6}}, {0xffff, 0x3f}, {0x6, 0xfff, {0x0, 0x1}}, {0x0, 0xfffe, {0x1, 0x5}}, {0x200, 0x0, {0x3, 0xffff0001}}, {0x28fc, 0x8000, {0x2, 0x9}}, {0x4, 0x8, {0x3, 0x800000}}, {0x2, 0x7fff, {0x1, 0x6}}, {0x5, 0x3f, {0x2, 0x1}}, {0x2, 0x2, {0x0, 0x6}}, {0x6f, 0x1f, {0x1, 0x4}}, {0x7, 0x0, {0x2, 0x6}}, {0x1400, 0x100, {0x0, 0x54}}, {0x7, 0x6811, {0x2, 0x1000}}, {0x5, 0x88d, {0x0, 0x8001}}, {0x1, 0x3e0, {0x1, 0x1}}, {0x5, 0xff, {0x0, 0x6}}, {0x5, 0x1, {0x1, 0x20}}, {0x400, 0x401, {0x3, 0x7}}, {0x1, 0x80, {0x0, 0xffff0a22}}, {0x8, 0x5, {0x2, 0x81}}, {0x4, 0x6, {0x2, 0x4471}}, {0x5, 0x401, {0x2}}, {0x4bb, 0x6, {0x1, 0xff}}, {0x100, 0x6eb5, {0x1, 0x5}}, {0x101, 0x1ba, {0x0, 0xfffffbff}}, {0x0, 0xd199, {0x0, 0x7}}, {0x3f, 0x6, {0x3, 0x7}}, {0x8001, 0x9, {0x1, 0x2}}, {0x6d7, 0x7, {0x0, 0x4a53}}, {0x4, 0xffc0, {0x2, 0xd06c}}, {0x1, 0x1, {0x3, 0x6658}}, {0x1, 0x3, {0x1, 0x800}}, {0x2, 0x32, {0x3, 0x5}}, {0xe21, 0x8, {0x0, 0xff}}, {0x8000, 0x7, {0x1, 0x1}}, {0x6, 0x1, {0x2, 0x5}}, {0xffc1, 0x8, {0x0, 0x643}}]}}}, {{0x254, 0x1, {{0x1}, 0x20, 0x81, 0x4, 0x0, 0x21, 'syz0\x00', "07312a974299371bd9d18303afc7c213c85b8216c790179d2cff4c03d6d1ccdc", "a86877dad30f01c59adb4a5abf316212659172d0691fc8851c967629e381abd9", [{0x6, 0x4, {0x2, 0x3}}, {0x20, 0x1ff, {0x2, 0x100}}, {0x1, 0x7, {0x1, 0x3e7c}}, {0x200, 0xff, {0x1, 0x263}}, {0x0, 0x6, {0x0, 0x3}}, {0x200, 0x3, {0x2, 0xfff}}, {0x20, 0x8, {0x1, 0x3}}, {0xff80, 0x7, {0x3, 0xffffff81}}, {0x3, 0x20, {0x0, 0x6}}, {0x8794, 0x7f, {0x1, 0xffffffff}}, {0x9e1, 0x7}, {0x1ff, 0x8, {0x3, 0x7}}, {0x8000, 0x8000, {0x1, 0x4fe}}, {0x255, 0x0, {0x0, 0xfff}}, {0x1f, 0x6, {0x0, 0xae46}}, {0x101, 0x101, {0x1, 0x99c3}}, {0x1, 0x1, {0x3, 0x8}}, {0x1, 0x8000, {0x2, 0x5}}, {0x5, 0x1, {0x2, 0x400}}, {0x0, 0x4, {0x1, 0x7fffffff}}, {0x7b4, 0x8, {0x1, 0x4}}, {0x1, 0x351, {0x0, 0x9}}, {0x2, 0x5, {0x3}}, {0x69e, 0x3f, {0x3, 0x517}}, {0x7, 0x8000, {0x2, 0x7}}, {0x7, 0xf5, {0x2, 0xfff}}, {0x4, 0xfffb}, {0xffff, 0x8, {0x1, 0x1000}}, {0x3f, 0x0, {0x2, 0x9}}, {0x3ff, 0x2, {0x0, 0x3}}, {0x4, 0x7ff, {0x1, 0x3}}, {0x81, 0x8, {0x0, 0x4}}, {0x0, 0x0, {0x0, 0xfc3a}}, {0x6, 0x5, {0x3, 0x5}}, {0xc68, 0x3, {0x0, 0x6a}}, {0x8, 0x8, {0x2, 0xc}}, {0x7, 0x40, {0x2, 0x7fffffff}}, {0x1ff, 0x7940, {0x3, 0x8}}, {0x0, 0x3ff, {0x0, 0x8}}, {0x7, 0x4000, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0xeb}, 0x2, 0x66, 0x2, 0x2, 0x26, 'syz0\x00', "6f5be2e0f7fca0de7e5a24cad7d1a8a6bceb3a0365af2ed05f0987927373c40b", "4ea701d5b672c2889c128ee4751a29321dd7b737d58dc62ed15390a35d96a432", [{0xfff, 0x100, {0x2, 0x7ff}}, {0xff, 0x8, {0x1, 0x8dc9}}, {0x0, 0x43, {0x1, 0x4}}, {0x800, 0x3, {0x1, 0xfff}}, {0x8, 0x5, {0x0, 0x4}}, {0xd22, 0x9, {0x3, 0x9}}, {0x0, 0x3f, {0x3, 0x1}}, {0x1, 0x0, {0x3, 0x5}}, {0x6000, 0xab3, {0x2, 0x9}}, {0x3, 0x101, {0x0, 0x3}}, {0x35, 0x8, {0x2, 0x40}}, {0x19, 0xaa10, {0x1, 0x1f}}, {0x6, 0x6, {0x0, 0x7e5}}, {0x82ed, 0x2, {0x3, 0x3}}, {0x1000, 0x54, {0x3, 0x2}}, {0x1, 0x0, {0x0, 0x3f}}, {0x2, 0xbe, {0x0, 0x3}}, {0x4, 0x0, {0x3}}, {0x2, 0x7fff, {0x0, 0x10000}}, {0x401, 0x2, {0x3, 0xffffffff}}, {0x3, 0x3f, {0x3, 0x5}}, {0x5e60, 0x9, {0x2, 0xffff}}, {0x8a77, 0xff, {0x1}}, {0x5, 0x4, {0x1, 0xaeea}}, {0x1, 0x8000, {0x3, 0x4b}}, {0x401, 0x4, {0x2, 0xff}}, {0x3, 0x8e, {0x0, 0x101}}, {0x2, 0x0, {0x3, 0x79}}, {0xd3ef, 0xffe1, {0x3, 0xffff}}, {0xc974, 0x8000, {0x1, 0x2}}, {0x9, 0x2, {0x0, 0xfffffffc}}, {0x100, 0x40, {0x2, 0x3}}, {0x9, 0x8, {0x1, 0x2}}, {0x2, 0xfff8, {0x0, 0x1}}, {0x4, 0x39, {0x1, 0x8e57}}, {0x75ad, 0x8, {0x3, 0x1}}, {0xef4, 0x100, {0x3, 0xfaf7}}, {0x0, 0x100, {0x1, 0x1}}, {0x11c, 0xfff9, {0x2, 0x40}}, {0xa4, 0xff, {0x2, 0x80000000}}]}}}, {{0x254, 0x1, {{0x1, 0x40}, 0x24, 0x9, 0xff, 0x8000, 0x14, 'syz1\x00', "935d3564bf543ada04f1ba70762fe7d49f0781defb6fab34b209572d6b24d579", "0eda5973b88c1f787757299f16acaea38b01a53cda519e7d99a502ee6379a4c4", [{0x4, 0x8001}, {0x2, 0x3, {0x0, 0x1}}, {0x8001, 0x81, {0x2, 0x7}}, {0x2, 0xe35, {0x1, 0x8}}, {0x0, 0x1a, {0x3, 0xa5a}}, {0x7f, 0x3ff, {0x3, 0x2}}, {0x7, 0x8, {0x2, 0x7ff}}, {0x2, 0x1, {0x2, 0x1ff}}, {0x0, 0x6b, {0x1, 0x100}}, {0x6, 0x4, {0x3, 0x3}}, {0x4, 0x8, {0x2, 0x2}}, {0xb5, 0x7, {0x1}}, {0x5, 0x1, {0x3}}, {0x800, 0x4}, {0x3f, 0x38, {0x2, 0x9}}, {0x56bd, 0x9, {0x3, 0x1ff}}, {0xf143, 0xfa4, {0x2, 0x401}}, {0x5, 0x6, {0x0, 0x9}}, {0x3, 0x1, {0x2, 0x2}}, {0xfe00, 0x8, {0x3, 0x81}}, {0x9, 0x1e, {0x1, 0x3}}, {0x0, 0x0, {0x1, 0xfab}}, {0x6, 0x2, {0x2, 0x2}}, {0x5, 0x3, {0x1, 0x6}}, {0x8, 0x0, {0x0, 0xdcd1}}, {0x3, 0x4d91, {0x1, 0x80}}, {0xff7f, 0x3680, {0x3, 0x9}}, {0x3ff, 0x3, {0x3, 0x9}}, {0x101, 0x0, {0x2, 0xa9a}}, {0x0, 0x1, {0x2, 0x2}}, {0xffff, 0xb80, {0x2, 0x8}}, {0x3244, 0x4, {0x2, 0x5}}, {0x7, 0x6, {0x1, 0x98d}}, {0x800, 0x400, {0x1, 0x7}}, {0x2, 0x2400, {0x0, 0xff}}, {0x1, 0x6, {0x3, 0xfff}}, {0x0, 0x7, {0x3, 0x7f}}, {0xfff7, 0x5, {0x0, 0x6}}, {0x0, 0x54, {0x2, 0x7}}, {0x9, 0x401, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0x8, 0x7f, 0xff, 0x2, 0x15, 'syz0\x00', "66e0816bbc00b7fc08c0c8ee0004732cab33ed16261a5665a640131746fda7ac", "5cafb8c95a0cbb534b5954ad5292a5a6d139ceca8cd738da8d27c4f9da2c8663", [{0xb3e, 0x80, {0x0, 0x5}}, {0xfff, 0x4, {0x1, 0x1}}, {0x7, 0xec, {0x2, 0x80000000}}, {0x2e1, 0xfff, {0x7eaaff4779e77e4}}, {0x0, 0x6, {0x1, 0xaa6f}}, {0x546, 0x8, {0x3, 0x2}}, {0x400, 0x401, {0x2, 0xeb}}, {0x8, 0x7, {0x3, 0x1000}}, {0x9, 0xfff8, {0x2, 0xffffffe0}}, {0x3451, 0x9, {0x0, 0x7}}, {0x1, 0x7, {0x0, 0x64}}, {0x2da4, 0x7, {0x3, 0xfff}}, {0x2, 0x0, {0x2, 0x4}}, {0x7, 0x5c9, {0x3, 0x7fffffff}}, {0x2, 0x7, {0x1, 0x9}}, {0xb883, 0x2, {0x0, 0x9}}, {0x0, 0x101, {0x0, 0x2}}, {0x1, 0x4, {0x1, 0x56}}, {0x1, 0x1, {0x3, 0x8}}, {0x4, 0xfff9, {0x3, 0x9}}, {0x1ff, 0xffff, {0x1, 0x9dc}}, {0xfff7, 0x46, {0x3, 0x9}}, {0x8, 0x9, {0x1, 0x93}}, {0x0, 0x6, {0x0, 0xc6d}}, {0x81, 0x9, {0x3, 0xffffffe1}}, {0x6, 0x9, {0x0, 0x9}}, {0x1, 0x0, {0x2, 0x2000000}}, {0x401, 0x63d, {0x3, 0x1}}, {0x7, 0x100, {0x2}}, {0x4, 0x9, {0x0, 0x8}}, {0x3f, 0x4, {0x1, 0x800}}, {0x9, 0x2, {0x3, 0x40}}, {0x5, 0x80, {0x2, 0x3}}, {0x9, 0x3, {0x2, 0x1ff}}, {0x80, 0x8157, {0x3, 0x7f}}, {0x0, 0x7, {0x3, 0x8a4}}, {0x1, 0x4, {0x3, 0x100}}, {0x2c, 0x1f, {0x3, 0x54}}, {0x3, 0x8000, {0x3, 0x8001}}, {0xdd, 0x6411, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x101}, 0x3, 0x3, 0xf9b0, 0x4, 0x26, 'syz1\x00', "23f2d39f4509ce6f01dca5f665b643bdc4562870ec0a0b252ba127a17246e919", "4b3ef787420431d14800fd10c2d0ddb170e463914e3fcb00483e373ad54ac94e", [{0x9, 0x101, {0x1, 0x8000}}, {0x8, 0x9, {0x3, 0x80000001}}, {0x3, 0x2f9, {0x1, 0x7}}, {0x7f, 0x6, {0x0, 0x5}}, {0x5, 0x739, {0x2, 0xfff}}, {0xbac, 0x1000, {0x0, 0x1}}, {0x0, 0x3f, {0x0, 0x5c2b}}, {0xd470, 0x2, {0x3, 0x8}}, {0x3, 0x8, {0x0, 0x5}}, {0x200, 0x8, {0x3, 0x4}}, {0x5, 0x4, {0x0, 0x9}}, {0x4, 0x0, {0x3, 0x513}}, {0xfff, 0x10b2, {0x1, 0x6}}, {0x3, 0x101, {0x0, 0x3ff}}, {0x3ff, 0x5, {0x0, 0x7}}, {0x101, 0x81, {0x0, 0x200}}, {0x84, 0x41f3, {0x3, 0x7fffffff}}, {0x4, 0x1df, {0x1, 0x3}}, {0x631, 0xe6, {0x1}}, {0x7, 0x32, {0x3, 0x1000}}, {0x1, 0x80, {0x0, 0x3c}}, {0x3f, 0x977b, {0x2, 0x7}}, {0x8000, 0x6, {0x0, 0x1ff}}, {0xb55, 0x3, {0x2, 0x3997}}, {0x4, 0x200, {0x3, 0x9}}, {0x57, 0x1}, {0x6, 0x6, {0x2, 0x20}}, {0x9, 0x4, {0x0, 0x67}}, {0x1000, 0x0, {0x3, 0x7}}, {0x3, 0x2, {0x3, 0x7}}, {0x5, 0x8, {0x1, 0xfffffff8}}, {0x6fc, 0x3, {0x1, 0xffff0000}}, {0xfff, 0x37, {0x3, 0xfffffff9}}, {0x8, 0x7, {0x1, 0x97d4}}, {0x1f, 0x1f, {0x1, 0x8001}}, {0x9, 0xff7f, {0x1, 0x8}}, {0x9, 0x2, {0x2, 0xfffffeff}}, {0x7ff, 0x0, {0x1, 0x4}}, {0x1, 0x9, {0x0, 0x101}}, {0xb5, 0x40b4, {0x1, 0x13}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x40844}, 0x200080c0)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaa02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xf5ffffff}], 0x2, 0x0)

00:14:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3240.491682] audit: type=1804 audit(1592180040.664:1924): pid=12539 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:00 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:00 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x26c)

00:14:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xf7ffff7f}], 0x2, 0x0)

00:14:00 executing program 3:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
sched_getscheduler(r0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r2])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaa03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3240.622415] audit: type=1804 audit(1592180040.744:1925): pid=12547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:00 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x2, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xfe800000}], 0x2, 0x0)

00:14:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xab00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3240.779852] audit: type=1804 audit(1592180040.984:1926): pid=12572 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:01 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xffff0000}], 0x2, 0x0)

00:14:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xab01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:01 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x26d)

00:14:01 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:01 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4cf3d3c0ccf4a3aa048fd092f2515cc47dd1ef71ec92512d4ba1764566920912fd1ff40bcf78723ed845ceae7614468a5242a7e491c36dc3064bc6d454e87209b7e2c7ae91db3ecde1b48c718374976ae1e0f7e767cecc551c28e06bb0aaebc1e83b4779f589c30e476223b83496a6faf701043bcd5e99685ad5106f65b07eeeca0c0f11cd2d03515f"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x4}}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$RTC_WIE_ON(r4, 0x700f)
umount2(&(0x7f00000001c0)='./file0\x00', 0x4)
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xab02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xfffffdef}], 0x2, 0x0)

00:14:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3241.615177] audit: type=1804 audit(1592180041.824:1927): pid=12614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:01 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x6, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xab03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xffffff7f}], 0x2, 0x0)

00:14:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xac00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:02 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x7, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:02 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x26e)

00:14:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xffffff8d}], 0x2, 0x0)

00:14:02 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x9, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xac01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:02 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c648df09e003d", @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:02 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xb, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xac02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3242.565537] 9pnet: Insufficient options for proto=fd
00:14:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}, 0xfffffff5}], 0x2, 0x0)

00:14:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3242.605016] audit: type=1804 audit(1592180042.794:1928): pid=12670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3242.653352] 9pnet: Insufficient options for proto=fd
00:14:02 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x30, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xac03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:03 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x26f)

00:14:03 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b0000082e6c00000000000000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$P9_RXATTRCREATE(r4, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:03 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x3, 0x0)

00:14:03 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x44, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xad00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3243.449622] audit: type=1804 audit(1592180043.654:1929): pid=12700 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:03 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x60, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xad01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:03 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000001c0)={0xfffffffb, 0x0, 0x3, 0x5, 0x40, "ec902def95cc020541d9f54304599216a068df", 0x9, 0x401})
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000240)={0xa, {0x4, 0x0, 0x6}}, 0xa)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x40, 0x9, 0x15, 0xa, "75e1a8b0010f5337a0914275b07965e9e43a5839d464e97ba2673bc19d39f7559ec7d4c7c2a956c9445981b810c14d3ec83e201820d4125b07a34b72e4c8d08d", "61b2b1266a92fdfd808c5bc17030d50634ee3e76f80fa811cf517528a9faee98", [0x100, 0xff]})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:03 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x4, 0x0)

00:14:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:03 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xe0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:04 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x270)

00:14:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xad02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:04 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x4, @none, 0x1f, 0x1}, 0xe)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6344fab5f376f9abde77dd1c062752d3cd1cf72f81f4ae953bf4f57cb3195f414b738bb7c321ebb0b8e834c6bbdf0ec27da46ecac021abd4e1b389d7df060d8021ec777a2a323a2129a317616a6ca1a29025e7aa21f7e463bac5afcea8d3c74f1ffd20681d15bee022a7333f19fcbf1cc7035454926ba6b42cbc590aff03a5266d86d1baac159485ae6648e62d35365bbffc5122d784f8e76a0afbd1f55cc034a19e9f1330", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x3, 0x4a5, 0x7, 0x0, 0x5, 0x9, 0x3, 0xfff]})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:04 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0xff, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x5, 0x0)

00:14:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:04 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xad03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x6, 0x0)

00:14:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:04 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
dup2(r3, r4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
r5 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xb5)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x20000000)
poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x8006}, {0xffffffffffffffff, 0x104}, {r5, 0x107}, {r5, 0x4020}, {r2, 0x2220}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x8042}, {0xffffffffffffffff, 0x4010}], 0x8, 0x380e)
write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000001c0)={0x29, 0x6, 0x0, {0x0, 0x6}}, 0x29)

00:14:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xae00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:04 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x271)

00:14:04 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x4, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x7, 0x0)

00:14:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xae01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:05 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x6, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:05 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x8, 0x0)

[ 3244.916821] audit: type=1804 audit(1592180045.124:1930): pid=12781 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xae02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

[ 3244.985133] audit: type=1804 audit(1592180045.194:1931): pid=12781 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:05 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x272)

00:14:05 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x9, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3245.229727] audit: type=1804 audit(1592180045.434:1932): pid=12806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:05 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x9, 0x0)

00:14:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xae03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:05 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:05 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x11c, 0x0, 0xa18, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8045}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x9, 0x0, 0x1, "8f3b000000dfffffff00000000000000004decd38500", 0xb5315241})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x24, 0x0, {0x8}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1098, &(0x7f0000000400)=ANY=[@ANYRESOCT])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa4)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000340)={{0x3, 0x2}, 'port1\x00', 0x40, 0x801, 0x8000, 0x3, 0x81, 0x0, 0x4, 0x0, 0x2, 0x3})

00:14:05 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x2, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:05 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaf00, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0xa, 0x0)

00:14:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x3, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:06 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x273)

00:14:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0xb, 0x0)

00:14:06 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0x5}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaf01, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x4, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3246.181471] audit: type=1804 audit(1592180046.384:1933): pid=12847 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x1a000, 0x0)

00:14:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaf02, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x6, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x2)

00:14:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xaf03, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:06 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x7, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:07 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x274)

00:14:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:07 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x3)

00:14:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb000, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:07 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x9, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3246.971324] audit: type=1804 audit(1592180047.174:1934): pid=12896 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:07 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xb, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb001, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x4)

00:14:07 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x30, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb002, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:08 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x275)

00:14:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x5)

00:14:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:08 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:08 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x44, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb003, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x6)

[ 3247.913288] 9pnet: Insufficient options for proto=fd
00:14:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb100, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:08 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x60, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3247.966452] 9pnet: Insufficient options for proto=fd
00:14:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

[ 3248.016024] audit: type=1804 audit(1592180048.224:1935): pid=12951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:08 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0ffff097b0000000070f0580f0000000000000000"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30}, 0x30)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266647a866e6f3dbfe2a230e82cf2e346370e7b51c20ada1ed9e68669cf02fcfde78daf7bc7254b1f25e38e523b858e0fbacb90b51332d7a74ddb5fb56f632cb9f4c46f8a77e02afb01cd26e7c99cd49e6297c1b40f5b3603fccd852e205f480612030fdc43e41dcd3ffa6aa8f8ddbd53e917ab1a61da00488956463b90f56243dcd512fa1d979746ee8826b59b0fc208f4beef95008e99ea91f5bc46210b52db49840aa4e96c4a1bb71dcf03b9fe0632931730805df207651b48d7394cf147fa6f4ed5359a37c9e29326fe4763cf2ec4e65d40d67c9f83b2161039e9868766acda2e0b6df92e08648e60", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

00:14:08 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x276)

00:14:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb101, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x7)

[ 3248.145394] audit: type=1804 audit(1592180048.294:1936): pid=12951 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:08 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xe0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3248.224662] 9pnet: Insufficient options for proto=fd
[ 3248.282863] 9pnet: Insufficient options for proto=fd
[ 3248.332897] audit: type=1804 audit(1592180048.534:1937): pid=12974 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:08 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x3}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x800, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r2, 0x80047437, 0x20000000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r3, 0x80047437, 0x20000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TCFLSH(r4, 0x80047437, 0x20000000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYBLOB="6fb1287c24b21f1a1e9380250da0e1db124330dc57c4aed25eec1bf829c9641d3290a9af952668a510", @ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESDEC=r5])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x0)

00:14:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x8)

00:14:08 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xff, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb102, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb103, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:08 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:09 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x277)

00:14:09 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x9)

00:14:09 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_tcp(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_client='access=client'}, {@cache_fscache='cache=fscache'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@subj_type={'subj_type', 0x3d, '^%]\x80#&{-)'}}, {@obj_user={'obj_user'}}, {@fowner_eq={'fowner'}}, {@uid_lt={'uid<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x4b}}]}})
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r7 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x9)

00:14:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb200, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:09 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x2, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb201, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:09 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0xa)

00:14:09 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3249.346835] audit: type=1804 audit(1592180049.544:1938): pid=13029 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
00:14:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "162e4c5db3827e69a5effa3ce1fe"}]}, @lsrr={0x83, 0x27, 0x0, [@rand_addr, @multicast1, @loopback, @loopback, @multicast1, @empty, @empty, @rand_addr, @rand_addr]}]}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000180), 0x0, 0x0)

00:14:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup2(r0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0xb202, 0x400, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0xffffffe4, 0x2}, 0x40)

00:14:09 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x4, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

00:14:10 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, &(0x7f0000000300)=[&(0x7f00000000c0)='+\x00', &(0x7f0000000100)='\x00'])
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000580)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0)
writev(r1, &(0x7f00000002c0), 0x278)

00:14:10 executing program 5:
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x6, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x0, [@rand_addr, @multicast1, @multicast1, @empty]}]}}}}}}}, 0x0)

[ 3250.236001] 9pnet: p9_fd_create_tcp (13028): problem connecting socket to 127.0.0.1
[ 3250.256976] audit: type=1804 audit(1592180050.464:1939): pid=13062 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/dev/vcsa" dev="sda1" ino=16339 res=1
[ 3283.174074] NOHZ: local_softirq_pending 08
[ 3303.652788] NOHZ: local_softirq_pending 08
[ 3402.850830] INFO: task syz-executor.3:13055 blocked for more than 140 seconds.
[ 3402.858715]       Not tainted 4.19.128-syzkaller #0
[ 3402.864852] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3402.874075] syz-executor.3  D29424 13055   6729 0x00000004
[ 3402.882962] Call Trace:
[ 3402.885994]  __schedule+0x8a2/0x1fc0
[ 3402.890046]  ? firmware_map_remove+0x1a1/0x1a1
[ 3402.895535]  ? mark_held_locks+0xa6/0xf0
[ 3402.899731]  ? rwsem_down_read_failed+0x21a/0x3b0
[ 3402.905163]  schedule+0x8d/0x1b0
[ 3402.908858]  rwsem_down_read_failed+0x21a/0x3b0
[ 3402.914343]  ? rt_mutex_futex_unlock+0xe0/0xe0
[ 3402.919291]  call_rwsem_down_read_failed+0x14/0x30
[ 3402.925056]  down_read+0x45/0xb0
[ 3402.928538]  ? lookup_slow+0x43/0x70
[ 3402.932915]  lookup_slow+0x43/0x70
[ 3402.936589]  walk_component+0x759/0xd30
[ 3402.942132]  ? follow_dotdot+0x210/0x210
[ 3402.947078]  ? walk_component+0xd30/0xd30
[ 3402.952474]  path_lookupat.isra.0+0x1f5/0x8c0
[ 3402.957283]  ? __se_sys_newlstat+0x96/0x120
[ 3402.962801]  ? path_parentat.isra.0+0x160/0x160
[ 3402.967899]  ? do_raw_spin_unlock+0x171/0x260
[ 3402.973570]  ? drop_futex_key_refs.isra.0+0x58/0xc0
[ 3402.979558]  ? futex_wake+0x164/0x490
[ 3402.983990]  ? cache_alloc_refill+0x30e/0x350
[ 3402.988517]  filename_lookup+0x1b0/0x410
[ 3402.993181]  ? filename_parentat.isra.0+0x410/0x410
[ 3402.998400]  ? __phys_addr_symbol+0x2c/0x70
[ 3403.003542]  ? __check_object_size+0x17b/0x421
[ 3403.008278]  ? getname_flags+0x25b/0x590
[ 3403.013024]  vfs_statx+0x113/0x1e0
[ 3403.016592]  ? vfs_statx_fd+0xb0/0xb0
[ 3403.021159]  __se_sys_newlstat+0x96/0x120
[ 3403.025446]  ? __se_sys_newstat+0x120/0x120
[ 3403.030051]  ? put_timespec64+0xcb/0x120
[ 3403.035106]  ? __se_compat_sys_gettimeofday+0x1b0/0x1b0
[ 3403.040866]  ? __se_sys_clock_gettime+0xbd/0x140
[ 3403.046763]  ? __se_sys_clock_nanosleep+0x2b0/0x2b0
[ 3403.052721]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3403.057490]  ? trace_hardirqs_off_caller+0x69/0x210
[ 3403.064439]  ? do_syscall_64+0x21/0x620
[ 3403.068966]  do_syscall_64+0xf9/0x620
[ 3403.073997]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3403.079748] RIP: 0033:0x45ca69
[ 3403.084105] Code: Bad RIP value.
[ 3403.087762] RSP: 002b:00007f74366bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[ 3403.098654] RAX: ffffffffffffffda RBX: 00000000004f6300 RCX: 000000000045ca69
[ 3403.107213] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 00000000200003c0
[ 3403.116270] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000
[ 3403.125167] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 3403.132999] R13: 0000000000000744 R14: 00000000004ca38d R15: 00007f74366be6d4
[ 3403.140860] INFO: task syz-executor.3:13056 blocked for more than 140 seconds.
[ 3403.149324]       Not tainted 4.19.128-syzkaller #0
[ 3403.155269] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3403.164050] syz-executor.3  D29536 13056   6729 0x00000004
[ 3403.170618] Call Trace:
[ 3403.173510]  __schedule+0x8a2/0x1fc0
[ 3403.177583]  ? firmware_map_remove+0x1a1/0x1a1
[ 3403.183097]  ? mark_held_locks+0xa6/0xf0
[ 3403.187552]  ? rwsem_down_read_failed+0x21a/0x3b0
[ 3403.192701]  schedule+0x8d/0x1b0
[ 3403.196709]  rwsem_down_read_failed+0x21a/0x3b0
[ 3403.202232]  ? rt_mutex_futex_unlock+0xe0/0xe0
[ 3403.207553]  call_rwsem_down_read_failed+0x14/0x30
[ 3403.213199]  down_read+0x45/0xb0
[ 3403.216771]  ? lookup_slow+0x43/0x70
[ 3403.221424]  lookup_slow+0x43/0x70
[ 3403.225241]  walk_component+0x759/0xd30
[ 3403.229776]  ? follow_dotdot+0x210/0x210
[ 3403.234573]  ? walk_component+0xd30/0xd30
[ 3403.239672]  path_lookupat.isra.0+0x1f5/0x8c0
[ 3403.244720]  ? do_mount+0x13d/0x2b50
[ 3403.248770]  ? path_parentat.isra.0+0x160/0x160
[ 3403.253644]  ? __save_stack_trace+0x99/0x100
[ 3403.258357]  filename_lookup+0x1b0/0x410
[ 3403.263257]  ? filename_parentat.isra.0+0x410/0x410
[ 3403.268395]  ? __phys_addr_symbol+0x2c/0x70
[ 3403.273011]  ? __check_object_size+0x17b/0x421
[ 3403.277655]  ? getname_flags+0x25b/0x590
[ 3403.282733]  do_mount+0x13d/0x2b50
[ 3403.286299]  ? check_preemption_disabled+0x41/0x280
[ 3403.291903]  ? copy_mount_string+0x40/0x40
[ 3403.296207]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 3403.301804]  ? kmem_cache_alloc_trace+0x356/0x3a0
[ 3403.307154]  ? copy_mount_options+0x27a/0x390
[ 3403.312031]  ksys_mount+0xd7/0x150
[ 3403.315698]  __x64_sys_mount+0xba/0x150
[ 3403.320278]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3403.325712]  do_syscall_64+0xf9/0x620
[ 3403.330033]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3403.335487] RIP: 0033:0x45ca69
[ 3403.338705] Code: Bad RIP value.
[ 3403.342145] RSP: 002b:00007f743669cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 3403.350561] RAX: ffffffffffffffda RBX: 00000000004f6cc0 RCX: 000000000045ca69
[ 3403.358024] RDX: 0000000020000380 RSI: 0000000020000340 RDI: 00000000200001c0
[ 3403.366411] RBP: 000000000078c0e0 R08: 0000000020000480 R09: 0000000000000000
[ 3403.376833] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 3403.387433] R13: 000000000000076b R14: 00000000004ca563 R15: 00007f743669d6d4
[ 3403.397640] INFO: task syz-executor.3:13057 blocked for more than 140 seconds.
[ 3403.407894]       Not tainted 4.19.128-syzkaller #0
[ 3403.414358] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3403.425085] syz-executor.3  D29744 13057   6729 0x00000004
[ 3403.432293] Call Trace:
[ 3403.434974]  __schedule+0x8a2/0x1fc0
[ 3403.440384]  ? firmware_map_remove+0x1a1/0x1a1
[ 3403.446051]  ? mark_held_locks+0xa6/0xf0
[ 3403.451614]  ? rwsem_down_read_failed+0x21a/0x3b0
[ 3403.458141]  schedule+0x8d/0x1b0
[ 3403.463784]  rwsem_down_read_failed+0x21a/0x3b0
[ 3403.469681]  ? rt_mutex_futex_unlock+0xe0/0xe0
[ 3403.476919]  call_rwsem_down_read_failed+0x14/0x30
[ 3403.482707]  down_read+0x45/0xb0
[ 3403.486672]  ? lookup_slow+0x43/0x70
[ 3403.491744]  lookup_slow+0x43/0x70
[ 3403.496107]  walk_component+0x759/0xd30
[ 3403.501441]  ? follow_dotdot+0x210/0x210
[ 3403.505668]  ? walk_component+0xd30/0xd30
[ 3403.510055]  path_lookupat.isra.0+0x1f5/0x8c0
[ 3403.514953]  ? ksys_chdir+0x84/0x1d0
[ 3403.518681]  ? path_parentat.isra.0+0x160/0x160
[ 3403.523446]  ? mark_held_locks+0xf0/0xf0
[ 3403.527756]  filename_lookup+0x1b0/0x410
[ 3403.532285]  ? filename_parentat.isra.0+0x410/0x410
[ 3403.537363]  ? __phys_addr_symbol+0x2c/0x70
[ 3403.543415]  ? __check_object_size+0x17b/0x421
[ 3403.548746]  ? getname_flags+0x25b/0x590
[ 3403.553684]  ksys_chdir+0x84/0x1d0
[ 3403.558641]  ? __ia32_sys_access+0x70/0x70
[ 3403.563719]  ? __se_sys_clock_nanosleep+0x2b0/0x2b0
[ 3403.569599]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3403.575086]  ? trace_hardirqs_off_caller+0x69/0x210
[ 3403.580424]  __x64_sys_chdir+0x2d/0x40
[ 3403.584355]  do_syscall_64+0xf9/0x620
[ 3403.588371]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3403.593818] RIP: 0033:0x45ca69
[ 3403.597165] Code: Bad RIP value.
[ 3403.600724] RSP: 002b:00007f743667bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[ 3403.608449] RAX: ffffffffffffffda RBX: 00000000004dae80 RCX: 000000000045ca69
[ 3403.615796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040
[ 3403.623241] RBP: 000000000078c180 R08: 0000000000000000 R09: 0000000000000000
[ 3403.630601] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 3403.638600] R13: 0000000000000072 R14: 00000000004c25a9 R15: 00007f743667c6d4
[ 3403.646624] INFO: task syz-executor.3:13059 blocked for more than 140 seconds.
[ 3403.654193]       Not tainted 4.19.128-syzkaller #0
[ 3403.659216] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3403.667731] syz-executor.3  D29536 13059   6729 0x00000004
[ 3403.674308] Call Trace:
[ 3403.676931]  __schedule+0x8a2/0x1fc0
[ 3403.680949]  ? firmware_map_remove+0x1a1/0x1a1
[ 3403.685633]  ? mark_held_locks+0xa6/0xf0
[ 3403.689927]  ? rwsem_down_read_failed+0x21a/0x3b0
[ 3403.695062]  schedule+0x8d/0x1b0
[ 3403.698533]  rwsem_down_read_failed+0x21a/0x3b0
[ 3403.703725]  ? rt_mutex_futex_unlock+0xe0/0xe0
[ 3403.708814]  call_rwsem_down_read_failed+0x14/0x30
[ 3403.713999]  down_read+0x45/0xb0
[ 3403.717592]  ? lookup_slow+0x43/0x70
[ 3403.721626]  lookup_slow+0x43/0x70
[ 3403.725396]  walk_component+0x759/0xd30
[ 3403.729578]  ? follow_dotdot+0x210/0x210
[ 3403.734943]  ? walk_component+0xd30/0xd30
[ 3403.739438]  path_lookupat.isra.0+0x1f5/0x8c0
[ 3403.744205]  ? do_mount+0x13d/0x2b50
[ 3403.748205]  ? path_parentat.isra.0+0x160/0x160
[ 3403.753207]  ? __save_stack_trace+0x99/0x100
[ 3403.757814]  filename_lookup+0x1b0/0x410
[ 3403.762123]  ? filename_parentat.isra.0+0x410/0x410
[ 3403.767377]  ? __phys_addr_symbol+0x2c/0x70
[ 3403.772041]  ? __check_object_size+0x17b/0x421
[ 3403.776850]  ? getname_flags+0x25b/0x590
[ 3403.781176]  do_mount+0x13d/0x2b50
[ 3403.784750]  ? check_preemption_disabled+0x41/0x280
[ 3403.789896]  ? copy_mount_string+0x40/0x40
[ 3403.795105]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 3403.801185]  ? kmem_cache_alloc_trace+0x356/0x3a0
[ 3403.806166]  ? copy_mount_options+0x27a/0x390
[ 3403.811021]  ksys_mount+0xd7/0x150
[ 3403.814657]  __x64_sys_mount+0xba/0x150
[ 3403.818728]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3403.823389]  do_syscall_64+0xf9/0x620
[ 3403.827412]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3403.832971] RIP: 0033:0x45ca69
[ 3403.836183] Code: Bad RIP value.
[ 3403.839583] RSP: 002b:00007f743665ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 3403.847840] RAX: ffffffffffffffda RBX: 00000000004f6c40 RCX: 000000000045ca69
[ 3403.855202] RDX: 0000000020000140 RSI: 0000000020000000 RDI: 0000000000000000
[ 3403.862729] RBP: 000000000078c220 R08: 0000000020000300 R09: 0000000000000000
[ 3403.870322] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 3403.878770] R13: 0000000000000769 R14: 00000000004ca549 R15: 00007f743665b6d4
[ 3403.886904] INFO: task syz-executor.3:13061 blocked for more than 140 seconds.
[ 3403.894642]       Not tainted 4.19.128-syzkaller #0
[ 3403.900700] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3403.910579] syz-executor.3  D29904 13061   6729 0x00000004
[ 3403.916414] Call Trace:
[ 3403.919296]  __schedule+0x8a2/0x1fc0
[ 3403.923532]  ? firmware_map_remove+0x1a1/0x1a1
[ 3403.928511]  ? mark_held_locks+0xa6/0xf0
[ 3403.933367]  ? rwsem_down_read_failed+0x21a/0x3b0
[ 3403.939132]  schedule+0x8d/0x1b0
[ 3403.942812]  rwsem_down_read_failed+0x21a/0x3b0
[ 3403.947540]  ? rt_mutex_futex_unlock+0xe0/0xe0
[ 3403.952684]  ? lookup_fast+0x4f6/0x1090
[ 3403.956847]  call_rwsem_down_read_failed+0x14/0x30
[ 3403.962083]  down_read+0x45/0xb0
[ 3403.965462]  ? path_openat+0x1a04/0x2eb0
[ 3403.969649]  path_openat+0x1a04/0x2eb0
[ 3403.974168]  ? path_mountpoint+0xa90/0xa90
[ 3403.978427]  ? mark_held_locks+0xf0/0xf0
[ 3403.982741]  do_filp_open+0x1a1/0x280
[ 3403.986667]  ? expand_files+0x44c/0x7c0
[ 3403.990774]  ? may_open_dev+0xf0/0xf0
[ 3403.994604]  ? lock_downgrade+0x740/0x740
[ 3403.998927]  ? lock_acquire+0x170/0x3c0
[ 3404.003062]  ? __alloc_fd+0x34/0x550
[ 3404.007118]  ? do_raw_spin_unlock+0x171/0x260
[ 3404.011753]  ? _raw_spin_unlock+0x29/0x40
[ 3404.016105]  ? __alloc_fd+0x43c/0x550
[ 3404.019944]  do_sys_open+0x3aa/0x510
[ 3404.023952]  ? filp_open+0x70/0x70
[ 3404.027930]  ? __se_sys_clock_nanosleep+0x2b0/0x2b0
[ 3404.033089]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3404.049018]  ? trace_hardirqs_off_caller+0x69/0x210
[ 3404.054726]  ? do_syscall_64+0x21/0x620
[ 3404.059136]  do_syscall_64+0xf9/0x620
[ 3404.063735]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3404.069126] RIP: 0033:0x45ca69
[ 3404.072630] Code: Bad RIP value.
[ 3404.076690] RSP: 002b:00007f7436639c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 3404.084670] RAX: ffffffffffffffda RBX: 00000000004f7600 RCX: 000000000045ca69
[ 3404.092231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
[ 3404.099800] RBP: 000000000078c2c0 R08: 0000000000000000 R09: 0000000000000000
[ 3404.107837] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 3404.115599] R13: 0000000000000790 R14: 00000000005261df R15: 00007f743663a6d4
[ 3404.123319] 
[ 3404.123319] Showing all locks held in the system:
[ 3404.130117] 1 lock held by khungtaskd/1079:
[ 3404.135193]  #0: 000000004d5ba277 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265
[ 3404.144888] 1 lock held by in:imklog/6124:
[ 3404.151583] 2 locks held by agetty/6135:
[ 3404.155660]  #0: 000000003d8823c1 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80
[ 3404.173016]  #1: 00000000bc0ae9c6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50
[ 3404.183079] 2 locks held by syz-executor.3/13033:
[ 3404.188345]  #0: 0000000018b257c5 (sb_writers#25){.+.+}, at: mnt_want_write+0x3a/0xb0
[ 3404.197629]  #1: 00000000ad4cc8dc (&sb->s_type->i_mutex_key#30/1){+.+.}, at: filename_create+0x15a/0x490
[ 3404.208176] 1 lock held by syz-executor.3/13055:
[ 3404.213581]  #0: 00000000ad4cc8dc (&sb->s_type->i_mutex_key#30){++++}, at: lookup_slow+0x43/0x70
[ 3404.223735] 1 lock held by syz-executor.3/13056:
[ 3404.229154]  #0: 00000000ad4cc8dc (&sb->s_type->i_mutex_key#30){++++}, at: lookup_slow+0x43/0x70
[ 3404.238382] 1 lock held by syz-executor.3/13057:
[ 3404.243497]  #0: 00000000ad4cc8dc (&sb->s_type->i_mutex_key#30){++++}, at: lookup_slow+0x43/0x70
[ 3404.252711] 1 lock held by syz-executor.3/13059:
[ 3404.257466]  #0: 00000000ad4cc8dc (&sb->s_type->i_mutex_key#30){++++}, at: lookup_slow+0x43/0x70
[ 3404.266702] 1 lock held by syz-executor.3/13061:
[ 3404.271745]  #0: 00000000ad4cc8dc (&sb->s_type->i_mutex_key#30){++++}, at: path_openat+0x1a04/0x2eb0
[ 3404.281568] 
[ 3404.283373] =============================================
[ 3404.283373] 
[ 3404.290516] NMI backtrace for cpu 1
[ 3404.294156] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 4.19.128-syzkaller #0
[ 3404.301811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3404.311275] Call Trace:
[ 3404.314064]  dump_stack+0x1fc/0x2fe
[ 3404.317708]  nmi_cpu_backtrace.cold+0x63/0xa2
[ 3404.322289]  ? lapic_can_unplug_cpu.cold+0x3c/0x3c
[ 3404.327472]  nmi_trigger_cpumask_backtrace+0x1a6/0x1eb
[ 3404.332793]  watchdog+0x962/0xe40
[ 3404.336276]  ? reset_hung_task_detector+0x30/0x30
[ 3404.341125]  kthread+0x30b/0x410
[ 3404.344489]  ? kthread_park+0x180/0x180
[ 3404.348491]  ret_from_fork+0x24/0x30
[ 3404.352534] Sending NMI from CPU 1 to CPUs 0:
[ 3404.357438] NMI backtrace for cpu 0
[ 3404.357444] CPU: 0 PID: 2036 Comm: kworker/u4:2 Not tainted 4.19.128-syzkaller #0
[ 3404.357449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3404.357453] Workqueue: bat_events batadv_nc_worker
[ 3404.357459] RIP: 0010:check_memory_region+0x108/0x180
[ 3404.357469] Code: 4a 8d 04 23 4d 85 c0 75 25 49 89 e9 49 29 c1 e9 74 ff ff ff 4d 85 c9 74 be 49 01 d9 eb 09 48 83 c0 01 4c 39 c8 74 b0 80 38 00 <74> f2 eb a4 4c 89 c0 49 39 c2 74 4b 5b 5d 41 5c e9 93 0f 00 00 49
[ 3404.357473] RSP: 0018:ffff8882118bfa10 EFLAGS: 00000046
[ 3404.357480] RAX: fffffbfff164e629 RBX: fffffbfff164e629 RCX: ffffffff814fbda8
[ 3404.357484] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8b273148
[ 3404.357489] RBP: fffffbfff164e62a R08: 0000000000000001 R09: fffffbfff164e62a
[ 3404.357494] R10: fffffbfff164e629 R11: ffffffff8b27314b R12: 0000000000000000
[ 3404.357498] R13: 0000000000000000 R14: ffff888051488200 R15: ffff8880921c1030
[ 3404.357504] FS:  0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
[ 3404.357508] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3404.357512] CR2: 00007f8094834000 CR3: 0000000096262000 CR4: 00000000001406f0
[ 3404.357517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3404.357522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3404.357524] Call Trace:
[ 3404.357527]  __lock_acquire+0x278/0x4380
[ 3404.357531]  ? mark_held_locks+0xf0/0xf0
[ 3404.357534]  ? __lock_acquire+0x6b9/0x4380
[ 3404.357537]  ? mark_held_locks+0xf0/0xf0
[ 3404.357541]  ? batadv_nc_purge_paths+0x245/0x340
[ 3404.357544]  lock_acquire+0x170/0x3c0
[ 3404.357547]  ? batadv_nc_purge_paths+0xdc/0x340
[ 3404.357551]  ? batadv_nc_to_purge_nc_node+0xf0/0xf0
[ 3404.357554]  _raw_spin_lock_bh+0x2f/0x40
[ 3404.357558]  ? batadv_nc_purge_paths+0xdc/0x340
[ 3404.357561]  batadv_nc_purge_paths+0xdc/0x340
[ 3404.357564]  batadv_nc_worker+0x299/0x760
[ 3404.357568]  process_one_work+0x892/0x1580
[ 3404.357571]  ? pwq_dec_nr_in_flight+0x310/0x310
[ 3404.357574]  worker_thread+0x96/0xe20
[ 3404.357577]  ? process_one_work+0x1580/0x1580
[ 3404.357580]  kthread+0x30b/0x410
[ 3404.357584]  ? kthread_park+0x180/0x180
[ 3404.357587]  ret_from_fork+0x24/0x30
[ 3404.358733] Kernel panic - not syncing: hung_task: blocked tasks
[ 3404.590622] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 4.19.128-syzkaller #0
[ 3404.598301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3404.608017] Call Trace:
[ 3404.610714]  dump_stack+0x1fc/0x2fe
[ 3404.615072]  panic+0x26a/0x50e
[ 3404.618280]  ? __warn_printk+0xf3/0xf3
[ 3404.622250]  ? lapic_can_unplug_cpu.cold+0x3c/0x3c
[ 3404.627190]  ? ___preempt_schedule+0x16/0x18
[ 3404.632250]  ? watchdog+0x962/0xe40
[ 3404.636036]  ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb
[ 3404.641648]  watchdog+0x973/0xe40
[ 3404.645113]  ? reset_hung_task_detector+0x30/0x30
[ 3404.649979]  kthread+0x30b/0x410
[ 3404.653367]  ? kthread_park+0x180/0x180
[ 3404.657366]  ret_from_fork+0x24/0x30
[ 3404.662438] Kernel Offset: disabled
[ 3404.666210] Rebooting in 86400 seconds..