[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 10.046962] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.208170] random: crng init done Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2018/10/04 23:44:06 fuzzer started 2018/10/04 23:44:08 dialing manager at 10.128.0.26:34385 2018/10/04 23:44:11 syscalls: 1 2018/10/04 23:44:11 code coverage: enabled 2018/10/04 23:44:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/04 23:44:11 setuid sandbox: enabled 2018/10/04 23:44:11 namespace sandbox: enabled 2018/10/04 23:44:11 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/04 23:44:11 fault injection: kernel does not have systematic fault injection support 2018/10/04 23:44:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/04 23:44:11 net packed injection: enabled 2018/10/04 23:44:11 net device setup: enabled 23:44:46 executing program 0: mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x402, 0x4000000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[], 0xffffff84) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/7, 0x3f}, {&(0x7f0000001340)=""/217, 0x7c}, {&(0x7f0000003500)=""/4096, 0xffffffe2}], 0x3) 23:44:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$EVIOCSABS3F(r0, 0x40104593, &(0x7f0000000080)={0x0, 0xff020000}) 23:44:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2c, &(0x7f0000001800)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) 23:44:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x6, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x10) 23:44:46 executing program 3: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 23:44:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000000000)=0x4) [ 74.831144] audit: type=1400 audit(1538696686.750:5): avc: denied { sys_admin } for pid=2088 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 74.895608] audit: type=1400 audit(1538696686.810:6): avc: denied { net_admin } for pid=2093 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 79.807047] audit: type=1400 audit(1538696691.730:7): avc: denied { sys_chroot } for pid=2095 comm="syz-executor2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 79.837227] audit: type=1400 audit(1538696691.760:8): avc: denied { associate } for pid=2095 comm="syz-executor2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 23:44:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x104, 0x4) sendto$inet6(r1, &(0x7f0000000080)="02030000070000005b000000fff55b4202938207d9fb3780398d5375000060007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2d1594c3b50035110f118d0000f55dc62600009b000000faffffff00010000aeb405000000ae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x1, @local}, 0x1c) [ 79.968370] audit: type=1400 audit(1538696691.890:9): avc: denied { net_raw } for pid=3674 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 23:44:52 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x400000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = dup2(r1, r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x7, 0x20, 0x1, r2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x2) ustat(0x389e7c43, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={[], 0x4, 0x800000000000000, 0x7f, 0x9, 0x5}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) 23:44:52 executing program 3: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="d74a", 0x2) write$FUSE_DIRENT(r1, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT], 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) 23:44:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_getroute={0x24, 0x1a, 0x15, 0x0, 0x0, {}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) 23:44:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f00000006c0)}) 23:44:52 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x400000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = dup2(r1, r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x7, 0x20, 0x1, r2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x2) ustat(0x389e7c43, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={[], 0x4, 0x800000000000000, 0x7f, 0x9, 0x5}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) [ 80.175405] audit: type=1400 audit(1538696692.080:10): avc: denied { dac_override } for pid=3715 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 80.249210] audit: type=1400 audit(1538696692.170:11): avc: denied { map_create } for pid=3737 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 80.268375] audit: type=1400 audit(1538696692.190:12): avc: denied { set_context_mgr } for pid=3743 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 80.278797] binder: 3743:3746 tried to acquire reference to desc 0, got 1 instead [ 80.278807] binder: 3743:3746 got transaction to context manager from process owning it [ 80.278822] binder: 3743:3746 transaction failed 29201/-22, size 0-0 line 3004 23:44:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000280)=0x4) 23:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") clone(0x210027fa, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r1 = getpid() setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x0, @multicast2, 0x0, 0x0, 'none\x00', 0x12}, 0x2c) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086610, 0xffffffffffffffff) [ 80.289786] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.357423] audit: type=1400 audit(1538696692.280:13): avc: denied { map_read map_write } for pid=3737 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 23:44:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) 23:44:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$EVIOCSABS3F(r0, 0x40104593, &(0x7f0000000080)={0x0, 0xff020000}) 23:44:52 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x400000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = dup2(r1, r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x7, 0x20, 0x1, r2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x2) ustat(0x389e7c43, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={[], 0x4, 0x800000000000000, 0x7f, 0x9, 0x5}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) 23:44:52 executing program 0: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000180)) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d5c222777a53c4c0a8e473b6e963c977453900"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x4000000018, 0x0, 0x4) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x8) r3 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0xfffffffffffffffc}, 0x1c) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@hci, &(0x7f0000000540)=0x80) accept4$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="0400000000000000000000007376de65422890e87f46039e7d1071cff0c2e6b2fc9d3d666d01b0daac3c29f1b2e4465a5fd3fee9e4d6af63"], 0x1}}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000005c0), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x2) sync_file_range(r5, 0xa6db4e3, 0x51931ac0, 0x6) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000700)) ftruncate(r5, 0x2007fff) 23:44:52 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = gettid() socketpair(0xa, 0x0, 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) wait4(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) 23:44:52 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="230000002e0007021dfffd946fa2830020200a0009000000001d8568ff0f00ffffff9e00280000001100ffffba16a0aa1c", 0x31}], 0x1}, 0x0) 23:44:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040), 0x2) 23:44:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) 23:44:52 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x400000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = dup2(r1, r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x7, 0x20, 0x1, r2}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x2) ustat(0x389e7c43, &(0x7f00000002c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={[], 0x4, 0x800000000000000, 0x7f, 0x9, 0x5}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) 23:44:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x2}, 0x10}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) [ 80.564113] audit: type=1400 audit(1538696692.470:14): avc: denied { create } for pid=3804 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:44:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x2000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setns(r1, 0x0) 23:44:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$EVIOCSABS3F(r0, 0x40104593, &(0x7f0000000080)={0x0, 0xff020000}) 23:44:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0xc, 0x1, [@typed={0x2f, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 23:44:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x2}, 0x10}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 23:44:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3b}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x233) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x19) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 23:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000bf75080000000004090000dcbc4649cdac1a37be54833f76611cea4c14084d7000000000005bfdb01096418539b29d421412de230766e7176d8f420f560c04b7f66c09370ca86cfbf66573c405374701c62a7836b4fe00000000000089b563196ac066ca9c571792e90f6e7b224dbb04ed501f15d7b6578bbc49b994920486132fe79892ce868ed7a065cee9a424e8421998320206387efd15f482816c5f83d5797761b93ec249c87b3b2f47406bab71cc00ae5cfd7a63e542346ff12473d3b70c90e5b857409ea63689e745e60b3eaa702b407d26692ab3dbcfa71419a353c1d3f4d93a1dc8576bc53e92984cc18521f4ec8a701a156380e5e3d1260102b06d0f0e068fd4edae7b47b14ef8da67e0392fc6f968607c1746b58cb23995c603000000aefab42a0b375231253dba19073c68d91f4d6491fc1756410971bc0000000000000000000000000000000000000000000000000000000000008256367d391c6ddd6e4b96aa4da781680ffed4239d914e75ff8adcedf76084e93ea31872596be4086d46d3c23714b30f6f1d3be4521cdf1d92eee5c01de82fe96e7ecdace880c35479b8c7bacd47d6614b606564774833990f00063281308b3a655df945e5806cddc52275537bde388cc3d38984004dbbaf123c4ac19390064af5ac9865aa95d7a9a1c106c40d9e9b59ebc1f1c6"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000bf75080000000004090000dcbc4649cdac1a37be54833f76611cea4c14084d7000000000005bfdb01096418539b29d421412de230766e7176d8f420f560c04b7f66c09370ca86cfbf66573c405374701c62a7836b4fe00000000000089b563196ac066ca9c571792e90f6e7b224dbb04ed501f15d7b6578bbc49b994920486132fe79892ce868ed7a065cee9a424e8421998320206387efd15f482816c5f83d5797761b93ec249c87b3b2f47406bab71cc00ae5cfd7a63e542346ff12473d3b70c90e5b857409ea63689e745e60b3eaa702b407d26692ab3dbcfa71419a353c1d3f4d93a1dc8576bc53e92984cc18521f4ec8a701a156380e5e3d1260102b06d0f0e068fd4edae7b47b14ef8da67e0392fc6f968607c1746b58cb23995c603000000aefab42a0b375231253dba19073c68d91f4d6491fc1756410971bc0000000000000000000000000000000000000000000000000000000000008256367d391c6ddd6e4b96aa4da781680ffed4239d914e75ff8adcedf76084e93ea31872596be4086d46d3c23714b30f6f1d3be4521cdf1d92eee5c01de82fe96e7ecdace880c35479b8c7bacd47d6614b606564774833990f00063281308b3a655df945e5806cddc52275537bde388cc3d38984004dbbaf123c4ac19390064af5ac9865aa95d7a9a1c106c40d9e9b59ebc1f1c6"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:53 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') [ 81.394392] audit: type=1400 audit(1538696693.310:15): avc: denied { create } for pid=3913 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:44:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x94b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 81.434746] audit: type=1400 audit(1538696693.350:16): avc: denied { write } for pid=3913 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:44:53 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc08000200e53c3109", 0x24) 23:44:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000d00)={0x14, 0x3, 0x2, 0x3}, 0x14}}, 0x0) 23:44:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$EVIOCSABS3F(r0, 0x40104593, &(0x7f0000000080)={0x0, 0xff020000}) 23:44:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 23:44:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2000000004) write(r0, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40ec58d070054dc17fbffff0100002a00f3ff09", 0x29) [ 81.615040] audit: type=1400 audit(1538696693.530:17): avc: denied { write } for pid=3959 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:44:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000001c0)='./bus\x00', 0x100000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 23:44:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x2}, 0x10}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 23:44:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x63, 0x400000002}], 0xf6) 23:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:54 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) 23:44:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 23:44:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x63, 0x400000002}], 0xf6) 23:44:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x2}, 0x10}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 23:44:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 23:44:54 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x0, 0x1, 0x7, 0x7}, {0x7fff, 0x7, 0x0, 0x3962}]}) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000480), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0xa2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x4000, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x0, 0x4, 0x8, {0xdc0, 0x7}, {0x0, 0x5}, @rumble={0x8, 0x4}}) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x7) getrusage(0x1, &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000002cc0)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000002d00)=r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) signalfd4(r1, &(0x7f0000000440)={0x7fff}, 0xfffffffffffffd49, 0x80000) r5 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) ioctl$FICLONE(r5, 0x40049409, r4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) rt_sigpending(&(0x7f0000000040), 0x8) 23:44:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 23:44:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x63, 0x400000002}], 0xf6) 23:44:54 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x5}) mount(&(0x7f0000018000), &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x42, 0x0) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000001) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet6_buf(r0, 0x29, 0x80000000000012, &(0x7f0000000140), 0x0) 23:44:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 23:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000440)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:44:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 23:44:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x1000) fcntl$setstatus(r2, 0x4, 0x6100) write$P9_RREMOVE(r2, &(0x7f0000000080), 0x7) sendfile(r2, r1, &(0x7f0000000180), 0x100000001) 23:44:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x63, 0x400000002}], 0xf6) 23:44:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140), 0x10) 23:44:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454da, 0x800000) 23:44:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) 23:44:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0xfffffffffffffffd) renameat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') lsetxattr$security_smack_entry(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='security.SMACK64EXEC\x00', &(0x7f0000000540)="7a757365725b4000ec961779cec42d6537fb94f18ff00561847e582e2ff31711abc1", 0x22, 0x0) 23:44:55 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000eeffffff000000000000000000e20d"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000000000/0x3000)=nil, 0x0) 23:44:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='reno\x00', 0x7a5f) connect(r0, &(0x7f0000000440)=@ethernet={0x0, @dev}, 0x80) 23:44:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x26f) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 83.313190] device lo entered promiscuous mode [ 83.322338] device lo left promiscuous mode [ 83.382243] device lo entered promiscuous mode 23:44:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x26f) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 23:44:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x2]}}}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x88}}, 0x0) 23:44:55 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x8) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 23:44:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @remote}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x100000001, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}]}, 0x190) 23:44:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fchdir(r0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24010000000000000000020000000400f2001c000100080004004e200000080004004802000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) preadv(0xffffffffffffffff, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220, 0xdc}, {&(0x7f0000006300)=""/247, 0xf7}, {&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007500)=""/192, 0xc0}], 0x4, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000600)=""/236) r4 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) signalfd(r1, &(0x7f0000000000)={0xfff}, 0x8) lseek(r2, 0x0, 0x2) eventfd(0x20) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0), 0x8000fffffffe) ftruncate(r0, 0x0) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000004c0)=[r5, 0xee01, 0xffffffffffffffff]) accept(r2, &(0x7f0000000280)=@xdp, &(0x7f0000000140)=0x80) rmdir(&(0x7f0000000040)='./bus\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)) sendfile(r2, r4, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x0) write$UHID_INPUT2(r1, &(0x7f0000000200), 0x6) getcwd(&(0x7f0000000740)=""/178, 0xb2) 23:44:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x26f) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 23:44:55 executing program 1: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 23:44:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x26f) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 23:44:55 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init() mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1000008) 23:44:55 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x8) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 23:44:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) [ 83.960339] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 23:44:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="c2191edc66e4cf4f069dce21d5a536f91ddc8de9650368a7dc94044e43", 0x1d) 23:44:55 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 23:44:56 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 23:44:56 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0'}, 0xff93) 23:44:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) socket$inet(0x2, 0xa, 0x4000000008) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x0, 0xfff, 0x1, 0x0, 0x1, [{0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x2000}]}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 23:44:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140), 0xc) fchdir(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x1, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000500)) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xc2d) lseek(r2, 0x0, 0x2) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r4, &(0x7f00000000c0)='./file0\x00') r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000003c0)="c154a4d72156a0433ec28c361bfeac8525e4a624c28a2ba86052540285514ffd543bf2b8d99b23ac82d839eb9dddfb9defbf49ea962526714d3b159b50de6fb6fc912193b5a343b448a0b0d1b45eb38dff0fa3dd0051d0836fe004ac2b3949e342848768190502ca20542a2fd1ca0a81e3a60cfa13a91c26c49d0737b39991c4c53067e9f70b23e1d4bad92add35846813d2ea261647ed9f370e19a322cff7bf810c9f7011dacebcd8c4c7781bb79e4b723991f4699af75cf5a3f60cfebfaf48673136c022f79b0fd94c069b189238f32af0ba577cca2910ce4c9e4c13113e0712a88fe6bd7b15d9d208d4b66a04a691814d74f95d16c8cd4287d4472cc6f0d6") mkdirat(r4, &(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) renameat2(r5, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000200)={0x101, 0x10001, 0x10000}, 0xc) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x4, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @loopback}, 0x200, 0x0, 0xffffffff, 0xd62, 0x6, &(0x7f00000001c0), 0x800, 0x0, 0x4}) write$P9_RLINK(r3, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) renameat(r4, &(0x7f0000000600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r2, &(0x7f0000000000)='./file0\x00') readlinkat(r5, &(0x7f0000000580)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000740)=""/4096, 0xfffffffffffffdb1) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000180)='./bus\x00', 0x40) setsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f00000004c0)=0xff, 0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000540)={0x0, 0x2a, 0x0, 0x9, 0x0, 0x8, 0x0, 0xaa, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:44:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x20, 0x1, 0x4}, 0x2c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x1}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x180, 0x0) ftruncate(r1, 0x108200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:44:56 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x8) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 23:44:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x800, 0x7, {0xfffffffffffffffc, 0x0, 0x0, 0x400001}}, 0x20) 23:44:56 executing program 2: r0 = socket$packet(0x11, 0x40000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000009700000000f4ff009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) truncate(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000001000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 23:44:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100)) [ 84.116897] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 23:44:56 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 23:44:56 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x8) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 23:44:56 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 23:44:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_getnetconf={0x14, 0x52, 0x301}, 0x14}}, 0x0) 23:44:56 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 23:44:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) socket$inet(0x2, 0xa, 0x4000000008) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x0, 0xfff, 0x1, 0x0, 0x1, [{0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x2000}]}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 23:44:56 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) exit(0x0) sendfile(r0, r1, &(0x7f0000000140), 0x7fffffff) 23:44:56 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 23:44:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create(0x57e0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000001}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x51ce551c, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:44:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000180)}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 23:44:56 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 23:44:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:44:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=@newspdinfo={0x30, 0x24, 0x1, 0x0, 0x0, 0x0, [@encap={0x1c, 0x4, {0xfffff000, 0x0, 0x0, @in6=@mcast2}}]}, 0x30}}, 0x0) 23:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500cefdd327d523751591777906d224e2469bd5e7b9b4670bbf1a2eb5332dcae2458aa641879814d41d8438dc1656e439b6d0789487c882d13a3efdde3bbdd85e880e3e59a335e20691c5f9710fda8bcad55df7926cc4f6eb48bc06dcc9c5799c4fb30c61d7d47d25daa97b0649ef716cc818aaec78c2431b7062f2c251ad8911a41061798003047f2f3b65242022bab2b396c843f372fc6fbd33bdec752900bebb86b61241daddb630f854e6", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 23:44:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000003fc0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 23:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500cefdd327d523751591777906d224e2469bd5e7b9b4670bbf1a2eb5332dcae2458aa641879814d41d8438dc1656e439b6d0789487c882d13a3efdde3bbdd85e880e3e59a335e20691c5f9710fda8bcad55df7926cc4f6eb48bc06dcc9c5799c4fb30c61d7d47d25daa97b0649ef716cc818aaec78c2431b7062f2c251ad8911a41061798003047f2f3b65242022bab2b396c843f372fc6fbd33bdec752900bebb86b61241daddb630f854e6", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) unlink(&(0x7f0000000180)='./bus\x00') [ 84.455681] netlink: 64 bytes leftover after parsing attributes in process `syz-executor4'. [ 84.493834] netlink: 64 bytes leftover after parsing attributes in process `syz-executor4'. 23:44:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f0000000100), 0x19f, &(0x7f0000000000)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@rand_addr}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x4e1}}, 0x0) 23:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500cefdd327d523751591777906d224e2469bd5e7b9b4670bbf1a2eb5332dcae2458aa641879814d41d8438dc1656e439b6d0789487c882d13a3efdde3bbdd85e880e3e59a335e20691c5f9710fda8bcad55df7926cc4f6eb48bc06dcc9c5799c4fb30c61d7d47d25daa97b0649ef716cc818aaec78c2431b7062f2c251ad8911a41061798003047f2f3b65242022bab2b396c843f372fc6fbd33bdec752900bebb86b61241daddb630f854e6", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 23:44:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) socket$inet(0x2, 0xa, 0x4000000008) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x0, 0xfff, 0x1, 0x0, 0x1, [{0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x2000}]}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 23:44:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create(0x57e0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000001}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x51ce551c, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:44:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500cefdd327d523751591777906d224e2469bd5e7b9b4670bbf1a2eb5332dcae2458aa641879814d41d8438dc1656e439b6d0789487c882d13a3efdde3bbdd85e880e3e59a335e20691c5f9710fda8bcad55df7926cc4f6eb48bc06dcc9c5799c4fb30c61d7d47d25daa97b0649ef716cc818aaec78c2431b7062f2c251ad8911a41061798003047f2f3b65242022bab2b396c843f372fc6fbd33bdec752900bebb86b61241daddb630f854e6", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) unlink(&(0x7f0000000180)='./bus\x00') [ 84.654802] netlink: 64 bytes leftover after parsing attributes in process `syz-executor4'. 23:44:56 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast1, 0x20000020a}, 0x1c) getpeername(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) 23:44:56 executing program 5: io_setup(0xc75, &(0x7f00000001c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)}]) 23:44:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create(0x57e0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000001}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x51ce551c, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:44:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) unshare(0x2000400) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000003c0)=""/248, 0x3f, 0x20040012003, 0x0, 0x129) 23:44:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) socket$inet(0x2, 0xa, 0x4000000008) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x0, 0xfff, 0x1, 0x0, 0x1, [{0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x2000}]}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 23:44:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 23:44:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x7}) dup2(r2, r0) ioctl$KDENABIO(r1, 0x4b36) 23:44:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) unshare(0x2000400) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000003c0)=""/248, 0x3f, 0x20040012003, 0x0, 0x129) 23:44:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) unshare(0x2000400) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000003c0)=""/248, 0x3f, 0x20040012003, 0x0, 0x129) 23:44:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) unshare(0x2000400) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) recvfrom$inet(r0, &(0x7f00000003c0)=""/248, 0x3f, 0x20040012003, 0x0, 0x129) 23:44:56 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3f, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) listen(r0, 0x0) 23:44:56 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002b00), &(0x7f0000002b40)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000001540)}], 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ppoll(&(0x7f0000002e00), 0x0, &(0x7f0000002e40)={0x0, 0x1c9c380}, &(0x7f0000002e80), 0x8) clone(0x100002102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)) seccomp(0x1, 0x0, &(0x7f0000000140)={0x171295a36f580306, &(0x7f0000000200)}) 23:44:56 executing program 3: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) pipe2(&(0x7f0000000040), 0x0) 23:44:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create(0x57e0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000001}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x51ce551c, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:44:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/47) [ 84.988627] netlink: 64 bytes leftover after parsing attributes in process `syz-executor4'. [ 85.028666] device lo left promiscuous mode 23:44:57 executing program 5: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x7fff}, 0x0, &(0x7f0000000180)={r1}, 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 23:44:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@ipv6_delroute={0x28, 0x19, 0x701, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) [ 85.160796] netlink: 64 bytes leftover after parsing attributes in process `syz-executor4'. 23:44:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x7}) dup2(r2, r0) ioctl$KDENABIO(r1, 0x4b36) 23:44:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 23:44:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:44:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xb, 0x5, 0x20000000000005, 0x1, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 23:44:57 executing program 3: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000a1aff7)={@loopback}, 0x14) 23:44:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:57 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') 23:44:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x363) r1 = socket$packet(0x11, 0x1000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x80}, 0x8000) writev(r0, &(0x7f0000000740)=[{&(0x7f0000001c80)="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", 0x7d1}], 0x1) 23:44:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x443fd) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 23:44:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 23:44:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x7}) dup2(r2, r0) ioctl$KDENABIO(r1, 0x4b36) 23:44:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 23:44:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:44:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 23:44:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 23:44:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:44:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000340)=ANY=[]) 23:44:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x7}) dup2(r2, r0) ioctl$KDENABIO(r1, 0x4b36) 23:44:59 executing program 3: clock_getres(0x2, &(0x7f0000000100)) 23:44:59 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 23:44:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000002500)='net/protocols\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x3) 23:44:59 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:44:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:44:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) 23:44:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0xe) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x2c) 23:44:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:44:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x7fe, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x101, 0x35c) sendto$inet6(r0, &(0x7f00000000c0)="040400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590880053c0e385472da7222a2bb42f2db494c3b50035060f118d0000f55d992600009b0000085f17be53bb8180046afd77fc7ae664f65bfc378c0a185e25ae620f4938b4b677081cc9058e570001523d7880d89abad699af485f036c70bbb8a78410e617e9be770000000000", 0x98, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x6, @mcast1}, 0x1c) 23:44:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_settings={0x705000, 0x0, @sync=&(0x7f0000000040)}}) 23:44:59 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:45:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:45:00 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:45:00 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:45:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x21, 0x4) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) getpgid(0x0) 23:45:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x61, &(0x7f0000000340)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x212) munlockall() 23:45:00 executing program 2: unshare(0x40000000) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x0, 0x1}) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0)={0x6, 0x2, 0x0, 0x81}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x1d, @remote, 0x4e23, 0x0, 'sed\x00', 0x2, 0x100000000}, {@remote, 0x4e20}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in, @in6=@mcast2, 0x4e22, 0x6, 0x0, 0x1f, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x80000001, 0x8000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, 0xe8) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r2 = fcntl$dupfd(r1, 0x0, r1) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 23:45:00 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:45:00 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:45:00 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000010c0)={0x0, 0x6, 0x3ff, 0xfffffffffffffff7}) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001040)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffc}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 23:45:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x2a5) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080), 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f0000000140), 0xc) 23:45:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x34}}, 0x0) 23:45:00 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=""/136, 0x88}) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x12}, @local, @local}, 0xc) 23:45:00 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=""/136, 0x88}) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x12}, @local, @local}, 0xc) 23:45:00 executing program 2: unshare(0x40000000) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x0, 0x1}) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0)={0x6, 0x2, 0x0, 0x81}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x1d, @remote, 0x4e23, 0x0, 'sed\x00', 0x2, 0x100000000}, {@remote, 0x4e20}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in, @in6=@mcast2, 0x4e22, 0x6, 0x0, 0x1f, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x80000001, 0x8000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, 0xe8) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r2 = fcntl$dupfd(r1, 0x0, r1) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 23:45:00 executing program 3: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) timer_settime(0x0, 0x0, &(0x7f00000001c0), 0x0) 23:45:00 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x2}, 0x20) 23:45:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x25, 0x0, 0x0, 0xfffffffffffffffc}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) 23:45:00 executing program 5: socket(0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000002c0)) clone(0x100002102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0xfffffffffffffff7, 0x3ff}]}) 23:45:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001500197f09004b0101048c5901880a92e24da04ee21e14ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8", 0x48}], 0x1) 23:45:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="16", 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000140), 0x8c7) 23:45:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa7}, [@ldst={0x3fd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 23:45:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000080)=""/36, 0x24) 23:45:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001500197f09004b0101048c5901880a92e24da04ee21e14ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8", 0x48}], 0x1) 23:45:00 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f762070") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x6, 0xffff, 0x4, 0xffff, 0xfff}) ftruncate(r7, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000300)=0xc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x8001, 0x100000001, 0x33, 0x2, 0x7f, 0x0, 0x100000001, 0x8, 0xc769, 0x24}) sendfile(r7, r6, &(0x7f0000000040), 0x10001) read(r7, &(0x7f00000003c0)=""/252, 0xfc) dup2(r6, r3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) get_thread_area(&(0x7f0000000000)={0x4, 0x20001000, 0x2400, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x1, 0x80000000}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002240)={@mcast1, 0x7c}) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @dev}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x0) 23:45:00 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=""/136, 0x88}) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x12}, @local, @local}, 0xc) 23:45:01 executing program 2: unshare(0x40000000) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x0, 0x1}) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0)={0x6, 0x2, 0x0, 0x81}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x1d, @remote, 0x4e23, 0x0, 'sed\x00', 0x2, 0x100000000}, {@remote, 0x4e20}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in, @in6=@mcast2, 0x4e22, 0x6, 0x0, 0x1f, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x80000001, 0x8000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, 0xe8) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r2 = fcntl$dupfd(r1, 0x0, r1) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 23:45:01 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa7}, [@ldst={0x3fd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 23:45:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001500197f09004b0101048c5901880a92e24da04ee21e14ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8", 0x48}], 0x1) 23:45:01 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) 23:45:01 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=""/136, 0x88}) futex(&(0x7f0000000ffc), 0x0, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x12}, @local, @local}, 0xc) 23:45:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f762070") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x6, 0xffff, 0x4, 0xffff, 0xfff}) ftruncate(r7, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000300)=0xc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x8001, 0x100000001, 0x33, 0x2, 0x7f, 0x0, 0x100000001, 0x8, 0xc769, 0x24}) sendfile(r7, r6, &(0x7f0000000040), 0x10001) read(r7, &(0x7f00000003c0)=""/252, 0xfc) dup2(r6, r3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) get_thread_area(&(0x7f0000000000)={0x4, 0x20001000, 0x2400, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x1, 0x80000000}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002240)={@mcast1, 0x7c}) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @dev}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x0) 23:45:01 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f00000002c0)) mount(&(0x7f00000001c0)=@loop={'/dev/loop'}, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='ntfs\x00', 0xa0000, &(0x7f0000000380)='$\x00') 23:45:01 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa7}, [@ldst={0x3fd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 23:45:01 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f00000000c0), 0x4000000000000003) 23:45:01 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa7}, [@ldst={0x3fd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 23:45:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f762070") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x6, 0xffff, 0x4, 0xffff, 0xfff}) ftruncate(r7, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000300)=0xc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x8001, 0x100000001, 0x33, 0x2, 0x7f, 0x0, 0x100000001, 0x8, 0xc769, 0x24}) sendfile(r7, r6, &(0x7f0000000040), 0x10001) read(r7, &(0x7f00000003c0)=""/252, 0xfc) dup2(r6, r3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) get_thread_area(&(0x7f0000000000)={0x4, 0x20001000, 0x2400, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x1, 0x80000000}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002240)={@mcast1, 0x7c}) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @dev}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x0) 23:45:01 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, &(0x7f00000000c0), 0x80000001) 23:45:01 executing program 2: unshare(0x40000000) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x0, 0x1}) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0)={0x6, 0x2, 0x0, 0x81}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x1d, @remote, 0x4e23, 0x0, 'sed\x00', 0x2, 0x100000000}, {@remote, 0x4e20}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in, @in6=@mcast2, 0x4e22, 0x6, 0x0, 0x1f, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x80000001, 0x8000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, 0xe8) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r2 = fcntl$dupfd(r1, 0x0, r1) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 23:45:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000100)='g', 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)='~', 0x1}], 0x1) ioctl$TCXONC(r3, 0x540a, 0x1) 23:45:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001500197f09004b0101048c5901880a92e24da04ee21e14ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8", 0x48}], 0x1) 23:45:01 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x0) 23:45:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x20002000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f762070") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x6, 0xffff, 0x4, 0xffff, 0xfff}) ftruncate(r7, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000300)=0xc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x8001, 0x100000001, 0x33, 0x2, 0x7f, 0x0, 0x100000001, 0x8, 0xc769, 0x24}) sendfile(r7, r6, &(0x7f0000000040), 0x10001) read(r7, &(0x7f00000003c0)=""/252, 0xfc) dup2(r6, r3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) get_thread_area(&(0x7f0000000000)={0x4, 0x20001000, 0x2400, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x1, 0x80000000}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002240)={@mcast1, 0x7c}) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @dev}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCFLSH(r2, 0x540b, 0x0) [ 89.273288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=4841 comm=syz-executor3 23:45:01 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000009f01001b00000000000000000000041000000200000000009500000000ffff000000ffff1e1687f589edecad914e79b78538ec061e7f86776b56712cc8ad0b37aaa5365a41d66a237fedaee0956f8b946ce8407f73df35e9cc0f85d15f3750a8d2dcfde5041df47c160cf1a99713ac058baea3198f7c2a9860e0ac772ee72a59b72715ba66dbd875fd16800c071538dcdcf3bf93900116673cbdaa4633d01839b02f742726cf41e400ac2dec33b9b4eb6aef144d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 23:45:01 executing program 1: r0 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x7) [ 89.313605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=4841 comm=syz-executor3 23:45:01 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f0000044000)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)) 23:45:01 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001400)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="b6600b2039848c1a1347620be9c6b589eecde808d454238a8a3295c056882d2f3a7c81c2b430a9cd308178d9ba392b7c5e513ca350bb5caa920330ac7c5d4ce7ac540a4697f2ba3f8ae02fdb4c7d") r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) 23:45:01 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000480)={0x0, 0x1c9c380}, &(0x7f00000004c0), 0x8) 23:45:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000}, 0x325) 23:45:01 executing program 0: getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x0, 0xc270) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$getown(r2, 0x9) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 23:45:02 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000540)=""/181, 0xb5}, 0xfffffffffffffffd) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x4, 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0652044001000000"], 0x0, 0x0, &(0x7f0000000680)}) 23:45:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)) 23:45:02 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001400)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="b6600b2039848c1a1347620be9c6b589eecde808d454238a8a3295c056882d2f3a7c81c2b430a9cd308178d9ba392b7c5e513ca350bb5caa920330ac7c5d4ce7ac540a4697f2ba3f8ae02fdb4c7d") r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) 23:45:02 executing program 0: getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x0, 0xc270) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$getown(r2, 0x9) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 23:45:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)) 23:45:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:45:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'veth0\x00'}) [ 90.178163] binder: 4899:4906 unknown command 1074024966 [ 90.193393] binder: 4899:4906 ioctl c0306201 200001c0 returned -22 [ 90.200278] binder_alloc: binder_alloc_mmap_handler: 4899 20001000-20004000 already mapped failed -16 23:45:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140), 0x4) 23:45:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) [ 90.218277] binder: BINDER_SET_CONTEXT_MGR already set [ 90.218284] binder: 4909:4909 ioctl 40046207 0 returned -16 [ 90.220156] binder: 4909:4911 unknown command 1074024966 23:45:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x202000000001, 0x0) dup3(r0, r1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 23:45:02 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) close(r1) tkill(r0, 0x1000000000016) [ 90.220166] binder: 4909:4911 ioctl c0306201 200001c0 returned -22 23:45:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 23:45:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x202000000001, 0x0) dup3(r0, r1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 23:45:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40045402, &(0x7f0000013000)) 23:45:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280), 0x8) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000002}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), &(0x7f00000001c0)=0x4) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x1}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 23:45:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x202000000001, 0x0) dup3(r0, r1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 23:45:03 executing program 0: getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x0, 0xc270) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$getown(r2, 0x9) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 23:45:03 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001400)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="b6600b2039848c1a1347620be9c6b589eecde808d454238a8a3295c056882d2f3a7c81c2b430a9cd308178d9ba392b7c5e513ca350bb5caa920330ac7c5d4ce7ac540a4697f2ba3f8ae02fdb4c7d") r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) 23:45:03 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 23:45:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180), 0x4) 23:45:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 23:45:03 executing program 2: madvise(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) 23:45:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000040)=""/4, 0xfebc) 23:45:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x202000000001, 0x0) dup3(r0, r1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 23:45:03 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x78) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 23:45:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000020f, 0x0) 23:45:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xe97, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x28}}, 0x0) 23:45:04 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) creat(&(0x7f0000000180)='./file0\x00', 0x0) 23:45:04 executing program 0: getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x0, 0xc270) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x9, 0xfffffffffffeffff, 0x1ff, 0x6, 0x563b, 0x4, 0x8, 0x8000, 0x0, 0x7ff}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fcntl$getown(r2, 0x9) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 23:45:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 23:45:04 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) 23:45:04 executing program 4: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) io_setup(0x1f, &(0x7f0000000080)=0x0) io_destroy(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, &(0x7f00000000c0), 0x1) 23:45:04 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001400)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="b6600b2039848c1a1347620be9c6b589eecde808d454238a8a3295c056882d2f3a7c81c2b430a9cd308178d9ba392b7c5e513ca350bb5caa920330ac7c5d4ce7ac540a4697f2ba3f8ae02fdb4c7d") r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) 23:45:04 executing program 3: symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) ptrace(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)) umount2(&(0x7f0000000000)='./file0\x00', 0x8) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x4}, 0x28, 0x0) 23:45:04 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000000a000/0x2000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 23:45:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 23:45:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0400063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b269141e72e49ace92b2dfdd36b0a6a0dc38b518cdf628235ce94335b7189c3006d00000000710e13"], 0x7c) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)) [ 92.443500] mmap: syz-executor4 (5041) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 23:45:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x16) 23:45:04 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') r1 = getpid() r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f8571") r3 = socket(0x10, 0x3, 0xa) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)="593f4e71786e773a9151f7bcd07e82ab115a609ac5f2b1b68c2c1c41645483b7be28cacc74508079449c5cd06bf2cf179eace3f1cbf12539046c51335a5df0fc0b1ec9cd97c19eba68d610e625d363ecbf16e22bf46c46715f7183cb27a02e816970ad394b5ae3658e381cd5b6f30bee796f296bd3fc1ec8d1aa8df791102f6c807aacf2d15ccd453a5668647bda8d195710db9e22a225a5745411a86b9e5c44410f8fb41e76720fffd7e0e1c60ea146e1badd674cbec0fbccbd9f8bc6") sendfile(r3, r4, &(0x7f0000000200), 0x100000001) sendfile(r3, r4, &(0x7f0000000100), 0x80000002) sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x100) write$evdev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x3b3}}, 0x18) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000600)=""/4096, 0x2}) fstat(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="078395971940f7db7abe33ffc59588eeace292877f0c4bc244b1c5e5ca18b18d2be0bb2923267b7d6332cd26334a01c286379645cdb2450915df88fd7d3697d5f9cb1115af9fe0184efb9408ce896e7029364fa9707ec42a558b9d31c4cf8c1d289e32877424bc15fa1d", &(0x7f0000000000)=""/25}, 0x18) [ 92.575498] audit_printk_skb: 9 callbacks suppressed [ 92.575514] audit: type=1400 audit(1538696704.490:21): avc: denied { create } for pid=5056 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 23:45:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 92.689496] audit: type=1400 audit(1538696704.610:22): avc: denied { write } for pid=5056 comm="syz-executor2" path="socket:[13967]" dev="sockfs" ino=13967 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 23:45:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000014c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$notify(r0, 0x402, 0x31) exit(0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x18) 23:45:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000140)="b3", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000000c0), &(0x7f0000000000)=0x32c) 23:45:04 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write(r0, &(0x7f0000000140)="6a5b745afe6c4bd42c35d522fa0bf58497df9bd360b32647576842c06fd63721e7a87b33f01d11ef5c2d84d2d2237ad108026c00c2a429154678153bfdc3ecbc66ea460b12f905a4d5aa76dc7a86494e53edfe6df09da053fb3d328536db95cf73fd782fe642b2fe595a62158ba23e9524586909", 0x74) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f00000003c0), 0x1000) 23:45:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x32, 0x6, 0x0, {0x0, 0x0, 0x9, 0x0, 'selfbdev^'}}, 0x32) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) [ 93.003390] input:  as /devices/virtual/input/input9 [ 93.050570] input:  as /devices/virtual/input/input10 23:45:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000058c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003580)=""/109, 0x6d}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) 23:45:05 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write(r0, &(0x7f0000000140)="6a5b745afe6c4bd42c35d522fa0bf58497df9bd360b32647576842c06fd63721e7a87b33f01d11ef5c2d84d2d2237ad108026c00c2a429154678153bfdc3ecbc66ea460b12f905a4d5aa76dc7a86494e53edfe6df09da053fb3d328536db95cf73fd782fe642b2fe595a62158ba23e9524586909", 0x74) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f00000003c0), 0x1000) 23:45:05 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)=""/43, &(0x7f0000000140)=0x2b) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340)=""/162, &(0x7f0000000100)=0xa2) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="674466980000000004000300010000001d67c3fe30703780e613b14945180913d3cd7e56d5332b15bd7d6d5b42268c5f82b213d384f0431bcd8e97c02c0d5e61c79bbef89309c264e4824849e7431e2c26d26bebeefca419d1123d742361e180ecc31326105cf70746caed1f52657d91ff6ba317a637fb4d"], 0x1) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8084}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @remote, 0xf, 0xf505f15a774b29d7}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x6, @multicast1, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0xffffffff, @local, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x5}]}) 23:45:05 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write(r0, &(0x7f0000000140)="6a5b745afe6c4bd42c35d522fa0bf58497df9bd360b32647576842c06fd63721e7a87b33f01d11ef5c2d84d2d2237ad108026c00c2a429154678153bfdc3ecbc66ea460b12f905a4d5aa76dc7a86494e53edfe6df09da053fb3d328536db95cf73fd782fe642b2fe595a62158ba23e9524586909", 0x74) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f00000003c0), 0x1000) 23:45:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 23:45:05 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write(r0, &(0x7f0000000140)="6a5b745afe6c4bd42c35d522fa0bf58497df9bd360b32647576842c06fd63721e7a87b33f01d11ef5c2d84d2d2237ad108026c00c2a429154678153bfdc3ecbc66ea460b12f905a4d5aa76dc7a86494e53edfe6df09da053fb3d328536db95cf73fd782fe642b2fe595a62158ba23e9524586909", 0x74) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f00000003c0), 0x1000) 23:45:05 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)=""/43, &(0x7f0000000140)=0x2b) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340)=""/162, &(0x7f0000000100)=0xa2) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="674466980000000004000300010000001d67c3fe30703780e613b14945180913d3cd7e56d5332b15bd7d6d5b42268c5f82b213d384f0431bcd8e97c02c0d5e61c79bbef89309c264e4824849e7431e2c26d26bebeefca419d1123d742361e180ecc31326105cf70746caed1f52657d91ff6ba317a637fb4d"], 0x1) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8084}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @remote, 0xf, 0xf505f15a774b29d7}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x6, @multicast1, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0xffffffff, @local, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x5}]}) 23:45:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x30, 0x0, 0x0, 0x4f42}, {0x80000006}]}, 0x10) sendto(r0, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) 23:45:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x3e1, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 23:45:05 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)=""/43, &(0x7f0000000140)=0x2b) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340)=""/162, &(0x7f0000000100)=0xa2) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="674466980000000004000300010000001d67c3fe30703780e613b14945180913d3cd7e56d5332b15bd7d6d5b42268c5f82b213d384f0431bcd8e97c02c0d5e61c79bbef89309c264e4824849e7431e2c26d26bebeefca419d1123d742361e180ecc31326105cf70746caed1f52657d91ff6ba317a637fb4d"], 0x1) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8084}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @remote, 0xf, 0xf505f15a774b29d7}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x6, @multicast1, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0xffffffff, @local, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x5}]}) 23:45:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30}, 0x30) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 23:45:05 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:05 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) pipe2$9p(&(0x7f00000004c0), 0x4000) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)=""/43, &(0x7f0000000140)=0x2b) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340)=""/162, &(0x7f0000000100)=0xa2) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="674466980000000004000300010000001d67c3fe30703780e613b14945180913d3cd7e56d5332b15bd7d6d5b42268c5f82b213d384f0431bcd8e97c02c0d5e61c79bbef89309c264e4824849e7431e2c26d26bebeefca419d1123d742361e180ecc31326105cf70746caed1f52657d91ff6ba317a637fb4d"], 0x1) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x8084}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @remote, 0xf, 0xf505f15a774b29d7}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x6, @multicast1, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0xffffffff, @local, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x5}]}) [ 93.790187] syz-executor2 (5079) used greatest stack depth: 22872 bytes left 23:45:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 23:45:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_getaddr={0x18, 0x16, 0x631}, 0x18}}, 0x0) 23:45:05 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000000000000010000004b9664af06f7d1719df426b1ea4c8500bab1585538fd943ebe24115b8fc8e3ccf6"], 0x31}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 23:45:05 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000100)) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)}) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 23:45:05 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000000000000010000004b9664af06f7d1719df426b1ea4c8500bab1585538fd943ebe24115b8fc8e3ccf6"], 0x31}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 23:45:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 23:45:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) 23:45:06 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000000000000010000004b9664af06f7d1719df426b1ea4c8500bab1585538fd943ebe24115b8fc8e3ccf6"], 0x31}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 23:45:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) 23:45:06 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30}, 0x30) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:06 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000000000000010000004b9664af06f7d1719df426b1ea4c8500bab1585538fd943ebe24115b8fc8e3ccf6"], 0x31}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 23:45:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:06 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:07 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30}, 0x30) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702f00797a3000bbd3c2830f2a102ed2060bdc00ca0afc0a0ab40400005d8ec474c281f5f1a6d118bc38d1a31d6c7a9aa66f072682cf09de0cb8bef55a1a530a3d2cee9ed82516a500ca71b2d0426b9ecd1e2567f55fc232021cb7b1dc618056acf431027a552b2b37cf5317c9194789fbfbfec9159de60772992222334c67e84ec1", 0x1ff) 23:45:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000180)=0x80, 0x0) shutdown(r0, 0x1) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 23:45:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x148) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x108200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) socketpair(0x2, 0x0, 0x1633, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r4 = getpid() ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[]}}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000200)=r4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fchdir(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xffffffff) 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r2, r1) 23:45:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r2, r1) 23:45:08 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30}, 0x30) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r2, r1) 23:45:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x895ff3b0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty={[0xe000000d2070000]}}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140), 0x4) r2 = accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdfd) close(r2) 23:45:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x41) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x1) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getgroups(0x3, &(0x7f00000004c0)=[0xee01, 0x0, 0xffffffffffffffff]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x12) 23:45:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r2, r1) 23:45:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x820002102013fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x4008630a, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) 23:45:09 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'bpq0\x00'}) 23:45:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000000)="a899c924ef79f61e384990610decf7166ae8d4c4568900f24c6a0bc9660103e87e003e2e8e2eaa8ca7de7b1a8d2ac0065903547921ffd217497bf9b8711786108f9896c27dad7ef5b47882cd32300c01afce06e992f75264c0da620b4d9b4ee60359c5393f8ee97f218111ea31cb05b62c6e593bfdf9457ef922820548ee727899e24de5255b1e8c571c8837dee1a109d461df9223") chmod(&(0x7f0000000100)='./file0\x00', 0x0) 23:45:09 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @rand_addr}, &(0x7f0000000340)=0x10, 0x80800) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000500)=0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_pts(r1, 0x0) request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='/dev/input/event#\x00', 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23:45:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) creat(&(0x7f0000000380)='./file0/bus/file0\x00', 0x0) 23:45:09 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000140)={0xab, 0x7, 0x0, {{0xffffffffffffffec, "2c6d696d655f74797065cb2160eeb41abbc0b8051d41ef9ef7d4e8e26170b9d6612737adb21370e627e73466f5af604a88f3f3db9b5ad007b09fae2cad76e8fc700d0d52e6676aa9e6501e21e566aab82c3de2d0f7d01589ab9cc4d7cf58f9b0da71caa6c4caf91fe81e9ff2a434b9a785c308c6abeb932b7fe735607eb63ea1814c62cd8dde8c03ef086be712d6c8e5d5710b8b204b648fd4320302ac7d"}}}, 0xff8c) 23:45:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040), 0x4) [ 97.381432] binder: BC_ATTEMPT_ACQUIRE not supported [ 97.390339] binder: 5340:5342 ioctl c0306201 200002c0 returned -22 23:45:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0xfffffffffffffffb) dup3(r3, r1, 0x0) 23:45:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x602}) 23:45:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000010c0), &(0x7f0000f24000)=0x4) [ 97.546397] audit: type=1400 audit(1538696709.470:23): avc: denied { attach_queue } for pid=5372 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1 23:45:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0xfff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0xfffffff2) connect$inet6(r0, &(0x7f0000000280), 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 23:45:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x3f, 0x4) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) sendmsg(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)}, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) 23:45:10 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xef71, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/81, 0x51}, 0x40002102) 23:45:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/106, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007ff, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x0, 0x8, 0x2d5, 0x205, 0x0, 0x85}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) 23:45:10 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000140)={0xab, 0x7, 0x0, {{0xffffffffffffffec, "2c6d696d655f74797065cb2160eeb41abbc0b8051d41ef9ef7d4e8e26170b9d6612737adb21370e627e73466f5af604a88f3f3db9b5ad007b09fae2cad76e8fc700d0d52e6676aa9e6501e21e566aab82c3de2d0f7d01589ab9cc4d7cf58f9b0da71caa6c4caf91fe81e9ff2a434b9a785c308c6abeb932b7fe735607eb63ea1814c62cd8dde8c03ef086be712d6c8e5d5710b8b204b648fd4320302ac7d"}}}, 0xff8c) 23:45:10 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @rand_addr}, &(0x7f0000000340)=0x10, 0x80800) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000500)=0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_pts(r1, 0x0) request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='/dev/input/event#\x00', 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23:45:10 executing program 4: r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x800, 0x80000000}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r1 = getpid() openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') 23:45:10 executing program 3: prctl$intptr(0x22, 0x740) 23:45:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x17}}) 23:45:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f00000000c0)=0x82, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 23:45:10 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$getreaper(0x19, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) times(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x48045, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=@flushpolicy={0x10, 0x1d, 0x98cad75f842ca691}, 0x10}, 0x8}, 0x0) 23:45:10 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$getreaper(0x19, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) times(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x48045, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=@flushpolicy={0x10, 0x1d, 0x98cad75f842ca691}, 0x10}, 0x8}, 0x0) [ 98.327009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:10 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$getreaper(0x19, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) times(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x48045, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=@flushpolicy={0x10, 0x1d, 0x98cad75f842ca691}, 0x10}, 0x8}, 0x0) [ 98.385553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:10 executing program 4: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000340)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) 23:45:10 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$getreaper(0x19, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) times(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x48045, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=@flushpolicy={0x10, 0x1d, 0x98cad75f842ca691}, 0x10}, 0x8}, 0x0) 23:45:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/106, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007ff, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x0, 0x8, 0x2d5, 0x205, 0x0, 0x85}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) [ 98.430333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:10 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000140)={0xab, 0x7, 0x0, {{0xffffffffffffffec, "2c6d696d655f74797065cb2160eeb41abbc0b8051d41ef9ef7d4e8e26170b9d6612737adb21370e627e73466f5af604a88f3f3db9b5ad007b09fae2cad76e8fc700d0d52e6676aa9e6501e21e566aab82c3de2d0f7d01589ab9cc4d7cf58f9b0da71caa6c4caf91fe81e9ff2a434b9a785c308c6abeb932b7fe735607eb63ea1814c62cd8dde8c03ef086be712d6c8e5d5710b8b204b648fd4320302ac7d"}}}, 0xff8c) [ 98.483340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:10 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @rand_addr}, &(0x7f0000000340)=0x10, 0x80800) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000500)=0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_pts(r1, 0x0) request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='/dev/input/event#\x00', 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23:45:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) tkill(r1, 0x1000000000016) 23:45:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:10 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000140)={0xab, 0x7, 0x0, {{0xffffffffffffffec, "2c6d696d655f74797065cb2160eeb41abbc0b8051d41ef9ef7d4e8e26170b9d6612737adb21370e627e73466f5af604a88f3f3db9b5ad007b09fae2cad76e8fc700d0d52e6676aa9e6501e21e566aab82c3de2d0f7d01589ab9cc4d7cf58f9b0da71caa6c4caf91fe81e9ff2a434b9a785c308c6abeb932b7fe735607eb63ea1814c62cd8dde8c03ef086be712d6c8e5d5710b8b204b648fd4320302ac7d"}}}, 0xff8c) 23:45:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:11 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2000000011, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000003fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004000)=0x14) 23:45:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/106, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007ff, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x0, 0x8, 0x2d5, 0x205, 0x0, 0x85}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) 23:45:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 23:45:11 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:11 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:11 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @rand_addr}, &(0x7f0000000340)=0x10, 0x80800) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000500)=0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_pts(r1, 0x0) request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='/dev/input/event#\x00', 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23:45:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:11 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/106, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007ff, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x0, 0x8, 0x2d5, 0x205, 0x0, 0x85}}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) 23:45:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 23:45:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:12 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 23:45:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:13 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x400000000003, 0x0) 23:45:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000200), &(0x7f0000000240), 0x8) 23:45:13 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) ioctl$TCFLSH(r2, 0x545d, 0x0) 23:45:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 23:45:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:13 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000080)=0xe8) r1 = syz_open_dev$loop(&(0x7f0000003000)='/dev/loop#\x00', 0x0, 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x304, @dev}, 0x4, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) r4 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) gettid() getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={0x0, r4, 0x0, 0xb, &(0x7f0000001980)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001ac0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)) getpgid(0xffffffffffffffff) lstat(&(0x7f0000001c80)='./file1\x00', &(0x7f0000003040)) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000001d40)) r5 = getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000002740)=[0xee01, 0xee01, 0x0]) r7 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() r10 = getegid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) r13 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002d40)=0x0) getgroups(0x6, &(0x7f0000002d80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000002ec0)=[{&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="e0aad2a8bc897de0659ba03b7a2d2c192270619042578a0bc1c46cab1239aa363ce2974a07477ea95b7033da213f311d153a5926bb8b8e1aea1428506d044addb56a7a2bbd42ea189ece1341608f19646c34d1eacdc349cb108966d577dd044c46b21815a078120d38f03fd4a09952d26bee7965c3af54ebdb6fa587e45a378351efe136940cbe9e53325f02bfe148905e450436607a7562cbb4b16f890221565ea24055bfb736c8bcc056", 0xab}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="e8c3ad77633c9862bd1751e76f11a76de0f24e1d57189cfe2572fdf52eb5c4ba5b057729083211b6faaef204f1e014dee5c71c44ec6580dd4bc5ec036e5edf80157034639f79d2282d0b95f1c1a0ceaaf1730c90566fe52a0049450f92a2376fa980a360c25d00b9ab548ea9046b0b5b1e59e0ac164d686c381d40886b26f2246b4747ad7d7e68fae4df87c68ea7b389a17f1da027bb6ae2e9e9768bf9a6750b1e5a733f9777ce8d947e18", 0xab}], 0x1, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r5, r0, r6}, @cred={0x20, 0x1, 0x2, r7, r0, r8}], 0x40, 0x40000}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002b00)="0b8456eeb3948d4878c9a8240de0f24dd847207b2bfd3f61d2cc1150493bf8b5218caba8e5fbc7cd59abf96a5c0b5d2160df24b73bc87b", 0x37}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r9, r0, r10}, @rights={0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r3, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r11, r0, r12}, @cred={0x20, 0x1, 0x2, r13, r0, r14}, @cred={0x20, 0x1, 0x2, r15, r0, r16}], 0xb0, 0x1}], 0x3, 0x4) ioctl$TIOCEXCL(r4, 0x540c) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f0000000040), 0x20000102000007) dup3(r4, r1, 0x0) 23:45:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 23:45:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 23:45:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 23:45:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:13 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 23:45:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000200)="b2aa370ec2dd9b9109e2df6b7baab53ee4f426c9eda8503ff252e1ba7219d64093bf852d0c417796cb2c7de5dee2b7c80a48518bf4d97db0ce1e225758eb907908f0a8409c64914930e0ce0f13acc121c72b8b5320", 0x55) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000000)='\x00') r3 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000001c0)={@dev, @multicast2}, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000480)={0x30, 0x0, 0x0, 0xef5, 0x6, 0x90, 0x3, 0x7ff}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x12, 0x9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@generic="3fa54b1108b5843cb4ad9c17c63a26fe346d0587ba8488f6"]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8880) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 23:45:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f0000000080), 0x200140000) sync() getitimer(0x3, &(0x7f00000000c0)) 23:45:14 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 23:45:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) shutdown(r0, 0x1) 23:45:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x0, 0xa, [@remote, @broadcast, @multicast1, @rand_addr, @empty, @broadcast, @empty, @multicast2, @remote, @broadcast]}, 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) 23:45:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x0, 0xa, [@remote, @broadcast, @multicast1, @rand_addr, @empty, @broadcast, @empty, @multicast2, @remote, @broadcast]}, 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) 23:45:14 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 23:45:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x0, 0xa, [@remote, @broadcast, @multicast1, @rand_addr, @empty, @broadcast, @empty, @multicast2, @remote, @broadcast]}, 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) 23:45:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x0, 0xa, [@remote, @broadcast, @multicast1, @rand_addr, @empty, @broadcast, @empty, @multicast2, @remote, @broadcast]}, 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) 23:45:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_pts(r1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7) dup2(r0, r2) 23:45:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={"73797ade000000000000007100", 0x2000400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwrite64(r0, &(0x7f0000000140)='j', 0x1, 0x0) 23:45:14 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) [ 102.698409] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.705322] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.725952] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.737313] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 102.752147] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 102.765992] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 102.806015] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 102.812878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 23:45:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/4096, 0x1000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001a80)={&(0x7f0000001940), 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=ANY=[]}}, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7}, 0xfffffe86) 23:45:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) time(&(0x7f0000000040)) 23:45:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10000000000010, &(0x7f0000534000), &(0x7f0000000000)=0x4) [ 102.926110] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 23:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setpriority(0x1, 0x0, 0xffffffffffff8001) [ 102.985958] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 103.005963] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 23:45:15 executing program 4: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) pread64(r1, &(0x7f0000000440)=""/37, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) close(r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) 23:45:15 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)="7569645f6d6170001d900f92d915133d397ef8312c9e1ffb42e48fcba4b36f2205c146a79a77ba41bd56ab958e36c17dbc7d2b6aa1c1a8b1083acec13a0af98327d611f956085ff96e1ebd1a6371ca51") r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) write$selinux_load(r1, &(0x7f0000000080)=ANY=[], 0x0) clone(0x64200000, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='ip_vti0\x00') ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000980)=""/193) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 23:45:15 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115ab7, 0x0) 23:45:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={"73797ade000000000000007100", 0x2000400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwrite64(r0, &(0x7f0000000140)='j', 0x1, 0x0) 23:45:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 103.207800] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 103.246247] CPU: 1 PID: 5807 Comm: syz-executor0 Not tainted 4.9.131+ #102 [ 103.253269] ffff8801d2d6f8a0 ffffffff81b37029 1ffff1003a5adf16 ffff8801d1e2af80 [ 103.261345] ffffffff82aa8a40 0000000000000001 0000000000400000 ffff8801d2d6f9e8 [ 103.269412] ffffffff814fc8ae 0000000041b58ab3 ffffffff82e35cb0 ffffffff81427e20 [ 103.277464] Call Trace: [ 103.280046] [] dump_stack+0xc1/0x128 [ 103.285396] [] warn_alloc.cold.31+0xd5/0x141 [ 103.291442] [] ? zone_watermark_ok_safe+0x250/0x250 [ 103.298097] [] ? check_preemption_disabled+0x3b/0x170 [ 103.304925] [] ? avc_has_perm+0x9e/0x3a0 [ 103.310620] [] __vmalloc_node_range+0x35e/0x600 [ 103.316928] [] ? check_preemption_disabled+0x3b/0x170 [ 103.323749] [] ? check_preemption_disabled+0x3b/0x170 [ 103.330573] [] ? task_has_security+0x130/0x270 [ 103.336785] [] vmalloc+0x5b/0x70 [ 103.341787] [] ? sel_write_load+0x135/0xfa0 [ 103.347741] [] sel_write_load+0x135/0xfa0 [ 103.353526] [] ? __save_stack_trace+0x7d/0xf0 [ 103.359663] [] ? sel_read_bool+0x240/0x240 [ 103.365532] [] ? add_lock_to_list.isra.9.constprop.25+0x149/0x280 [ 103.373411] [] ? __lock_acquire+0x2ae8/0x4a10 [ 103.379551] [] ? trace_hardirqs_on+0x10/0x10 [ 103.385592] [] ? trace_hardirqs_on+0x10/0x10 [ 103.391635] [] __vfs_write+0x115/0x580 [ 103.397167] [] ? sel_read_bool+0x240/0x240 [ 103.403035] [] ? __vfs_read+0x560/0x560 [ 103.408650] [] ? check_preemption_disabled+0x3b/0x170 [ 103.415562] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 103.422733] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 103.429295] [] ? __sb_start_write+0x161/0x300 [ 103.435418] [] vfs_write+0x187/0x520 [ 103.440765] [] SyS_write+0xd9/0x1c0 [ 103.446022] [] ? SyS_read+0x1c0/0x1c0 [ 103.451453] [] ? do_syscall_64+0x48/0x550 23:45:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x4}}, 0x24, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 23:45:15 executing program 4: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r0, r2, 0x80000) [ 103.457230] [] ? SyS_read+0x1c0/0x1c0 [ 103.462664] [] do_syscall_64+0x19f/0x550 [ 103.468360] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 103.536009] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 103.542893] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.573854] Mem-Info: [ 103.583172] active_anon:43603 inactive_anon:13278 isolated_anon:0 [ 103.583172] active_file:4676 inactive_file:25225 isolated_file:0 [ 103.583172] unevictable:0 dirty:3147 writeback:0 unstable:0 [ 103.583172] slab_reclaimable:8677 slab_unreclaimable:55741 [ 103.583172] mapped:55173 shmem:13293 pagetables:1306 bounce:0 [ 103.583172] free:1438239 free_pcp:392 free_cma:0 [ 103.630597] Node 0 active_anon:174312kB inactive_anon:53112kB active_file:18704kB inactive_file:104900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220592kB dirty:16584kB writeback:0kB shmem:53172kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 103.658607] DMA32 free:3019272kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3019944kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB 23:45:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={"73797ade000000000000007100", 0x2000400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwrite64(r0, &(0x7f0000000140)='j', 0x1, 0x0) 23:45:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000540), 0x4) 23:45:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xffffffff, 0x4) 23:45:15 executing program 1: io_setup(0x2, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f00000001c0)={0x0, 0x989680}) [ 103.715979] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 23:45:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00') r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000063dc900000001000400d2"], 0xd) write$eventfd(r1, &(0x7f0000000040)=0x100000001, 0x2e9) 23:45:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="26000000130047f10701c1b00ef900000700000000ff0d0cf772c29e8dba8751000014006e35", 0x26) [ 103.725954] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 103.831305] lowmem_reserve[]:[ 103.835998] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 103.836087] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.842483] keychord: keycode 29300 out of range [ 103.875457] 0 3505 3505 Normal free:2718768kB min:5580kB low:9168kB high:12756kB active_anon:174712kB inactive_anon:53112kB active_file:18704kB inactive_file:113200kB unevictable:0kB writepending:4300kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:33808kB slab_unreclaimable:224980kB kernel_stack:5248kB pagetables:5520kB bounce:0kB free_pcp:1064kB local_pcp:536kB free_cma:0kB [ 103.918857] lowmem_reserve[]: 0 0 0 [ 103.931262] DMA32: 6*4kB (UM) 4*8kB (M) 3*16kB (M) 3*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019272kB [ 103.957440] Normal: [ 103.959773] PF_BRIDGE: RTM_SETLINK with unknown ifindex 23:45:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000000018fd1800120008000100736974000c00020008000a0000000000"], 0x1}}, 0x0) 23:45:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x400000000000b, &(0x7f0000001280)=""/4096, &(0x7f0000000000)=0x1000) 23:45:15 executing program 1: socketpair$unix(0x1, 0x100000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x80000002, 0x290) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4002805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 23:45:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000580)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)) listen(r1, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940), 0x0, 0x0, &(0x7f00000019c0)={0x77359400}) get_robust_list(0x0, &(0x7f0000000380)=&(0x7f00000002c0)={&(0x7f0000000200), 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f00000003c0)=0x18) fstatfs(0xffffffffffffffff, &(0x7f0000000480)=""/175) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[]}}, 0x0) shutdown(r2, 0x1) recvfrom$inet6(r2, &(0x7f0000000040)=""/31, 0x1f, 0x40000000, &(0x7f0000000080), 0xfffffffffffffeb7) r3 = accept4(r1, 0x0, &(0x7f00000006c0), 0x800) sendto$inet6(r3, &(0x7f0000000340)='A', 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) [ 103.970579] 1391*4kB (UE) 2452*8kB (UME) 1360*16kB (UME) 63*32kB (UME) 292*64kB (UME) 82*128kB (UME) 24*256kB (UME) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 641*4096kB (M) = 2715964kB 47499 total pagecache pages [ 104.002342] 0 pages in swap cache [ 104.005837] Swap cache stats: add 0, delete 0, find 0/0 [ 104.012233] Free swap = 0kB [ 104.015302] Total swap = 0kB [ 104.020823] 1965979 pages RAM [ 104.023980] 0 pages HighMem/MovableOnly [ 104.029528] 313664 pages reserved [ 104.033413] syz-executor0: vmalloc: allocation failure: 0 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 104.051581] CPU: 0 PID: 5812 Comm: syz-executor0 Not tainted 4.9.131+ #102 [ 104.056897] audit: type=1400 audit(1538696715.980:24): avc: denied { net_broadcast } for pid=5874 comm="syz-executor1" capability=11 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 104.059178] input: syz1 as /devices/virtual/input/input11 [ 104.088752] ffff8801d706f8a0 ffffffff81b37029 1ffff1003ae0df16 ffff8801ab5597c0 [ 104.096818] ffffffff82aa8a40 0000000000000001 0000000000400000 ffff8801d706f9e8 [ 104.104887] ffffffff814fc8ae 0000000041b58ab3 ffffffff82e35cb0 ffffffff81427e20 [ 104.112983] Call Trace: [ 104.115566] [] dump_stack+0xc1/0x128 [ 104.120929] [] warn_alloc.cold.31+0xd5/0x141 [ 104.126987] [] ? zone_watermark_ok_safe+0x250/0x250 [ 104.133663] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 104.140493] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 104.147049] [] ? check_preemption_disabled+0x3b/0x170 [ 104.153864] [] ? retint_kernel+0x2d/0x2d [ 104.159554] [] __vmalloc_node_range+0x35e/0x600 [ 104.165848] [] ? check_preemption_disabled+0x3b/0x170 [ 104.172672] [] ? check_preemption_disabled+0x3b/0x170 [ 104.179487] [] ? task_has_security+0x130/0x270 [ 104.185696] [] vmalloc+0x5b/0x70 [ 104.190686] [] ? sel_write_load+0x135/0xfa0 [ 104.196645] [] sel_write_load+0x135/0xfa0 [ 104.202435] [] ? sel_read_bool+0x240/0x240 [ 104.208297] [] ? trace_hardirqs_on+0x10/0x10 [ 104.214330] [] ? trace_hardirqs_on+0x10/0x10 [ 104.220362] [] __vfs_write+0x115/0x580 [ 104.225884] [] ? sel_read_bool+0x240/0x240 [ 104.231750] [] ? __vfs_read+0x560/0x560 [ 104.237367] [] ? check_preemption_disabled+0x3b/0x170 [ 104.244184] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 104.250996] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 104.257565] [] ? __sb_start_write+0x161/0x300 [ 104.263690] [] vfs_write+0x187/0x520 [ 104.269040] [] SyS_write+0xd9/0x1c0 [ 104.274304] [] ? SyS_read+0x1c0/0x1c0 [ 104.279738] [] ? do_syscall_64+0x48/0x550 [ 104.285510] [] ? SyS_read+0x1c0/0x1c0 [ 104.290942] [] do_syscall_64+0x19f/0x550 23:45:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x8000) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETS(r0, 0x5452, &(0x7f00000000c0)={0xfff}) dup3(r1, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 23:45:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={"73797ade000000000000007100", 0x2000400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwrite64(r0, &(0x7f0000000140)='j', 0x1, 0x0) 23:45:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e22}, 0x1c) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 23:45:16 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r0, 0xff) 23:45:16 executing program 1: clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000000000)) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="8ab7c92fff2a63c4eb3b31ec0574f981e6a7acb09a2111aefd326eff10f487ef9ab14061cd044140a6c514636236d2a52487da5ce5b3dd90acdd2d5cf75ec550bdd4dff9e070c59e70410abb4fecf2c992d5370a707ebf322a9ed11c9b42c269bbe3b98f1e1472f7ab1f76e33c89c5fa51a3fa8cd5151054d1e3d7885ebf66955a0cf1fb01b4a9b7db036520199c0a9f2478603cd390001fb84c71bfd8c4c84c01c31bdb25aa496897b965a407b684902f14a8acd2e67ecde7339c4975b418cfa12f5342db3110221f123fe4bb6d71748ea6053d60d60d31676d89d4f8ba059c67b6d7df251e8b1936de832c1e4cae35f55395478805f4460af686d9b9dabc3a") [ 104.296664] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 104.304076] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.319835] Mem-Info: [ 104.322275] active_anon:43659 inactive_anon:13282 isolated_anon:0 [ 104.322275] active_file:4679 inactive_file:29580 isolated_file:0 [ 104.322275] unevictable:0 dirty:136 writeback:2 unstable:0 [ 104.322275] slab_reclaimable:8498 slab_unreclaimable:56172 [ 104.322275] mapped:55149 shmem:13294 pagetables:1408 bounce:0 23:45:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 104.322275] free:1433374 free_pcp:343 free_cma:0 23:45:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x800000007f) gettid() r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1) timer_create(0xfffffffffffffffe, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000002c0)}}, &(0x7f00000003c0)) r2 = dup(r0) sendto$unix(r2, &(0x7f0000000200)="869224204c4ecdcea8d42cbe0e820b7ca8586c01c906522d36f6bb471d208be6525cca0155bf9f2558c6fbf61c732e52c88adde52a5338438ac70a2f77ff59f50fa150358cee00ddd9b415dbd9a582b705b4ef4d4e", 0x55, 0x20000050, &(0x7f0000000140)=@abs={0x1}, 0x6e) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000400)) dup2(r3, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) fcntl$dupfd(r0, 0x80010000000406, r0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 104.394170] Node 0 active_anon:175076kB inactive_anon:53132kB active_file:18716kB inactive_file:118360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220760kB dirty:496kB writeback:0kB shmem:53276kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 104.416015] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 104.416147] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.441731] DMA32 free:3019272kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3019944kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:672kB local_pcp:672kB free_cma:0kB [ 104.472887] lowmem_reserve[]: 0 3505 3505 23:45:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1ff) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000002580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 23:45:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) read(r1, &(0x7f0000000340)=""/128, 0xfffffee1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) signalfd(r2, &(0x7f0000000240), 0x8) 23:45:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1ff) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000002580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) [ 104.478435] Normal free:2712736kB min:5580kB low:9168kB high:12756kB active_anon:174968kB inactive_anon:53120kB active_file:18716kB inactive_file:118376kB unevictable:0kB writepending:520kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:34000kB slab_unreclaimable:225124kB kernel_stack:5376kB pagetables:5740kB bounce:0kB free_pcp:1288kB local_pcp:624kB free_cma:0kB [ 104.518133] lowmem_reserve[]: 0 0 0 23:45:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1ff) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000002580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) [ 104.522303] DMA32: 6*4kB (UM) 4*8kB (M) 3*16kB (M) 3*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019272kB [ 104.548607] Normal: 1601*4kB (UME) 2457*8kB (UME) 1370*16kB (UME) 17*32kB (ME) 297*64kB (UME) 73*128kB (UME) 16*256kB (UME) 2*512kB (ME) [ 104.565991] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.573778] 1*1024kB (E) 2*2048kB (UM) 641*4096kB (M) = 2712652kB 47566 total pagecache pages [ 104.594211] 0 pages in swap cache [ 104.595974] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 104.612785] Swap cache stats: add 0, delete 0, find 0/0 [ 104.621185] Free swap = 0kB [ 104.624233] Total swap = 0kB [ 104.627958] 1965979 pages RAM [ 104.631047] 0 pages HighMem/MovableOnly [ 104.634993] 313664 pages reserved 23:45:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pkey_free(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x106) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0xdcb, 0x100000000, 0x20, 0x0, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000200)}, 0x20, 0x4, 0x0, 0x0, 0x0, 0x800}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x8970, &(0x7f00000001c0)={'syzkaller1\x00', @ifru_names='veth0_to_team\x00'}) sched_setscheduler(r2, 0x5, &(0x7f0000000080)) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x42, 0x0, 0x8}}, 0x14) ioprio_get$pid(0x3, r2) 23:45:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x434, 0x0, 0x0, 0x15b874b9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000063fc98c0100000400000000000000000065750ede825e45a90f3d09876e700cd4e191a1f98937702d8f9523b12ed90920ffff33bb937dee28d4b2921ea40d"], 0x41) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x401}) 23:45:16 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x600}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 23:45:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1ff) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000002580)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 23:45:16 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigtimedwait(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)={0x77359400}, 0x8) 23:45:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000180)) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4000000000000000}) 23:45:16 executing program 0: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)="d1", 0x1, 0xfffffffffffffffb) [ 104.873838] IPv6: Can't replace route, no match found 23:45:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x521, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}}, 0x1c}}, 0x0) 23:45:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @rand_addr}, {0x0, @random="79d2106aa561"}, 0x0, {0x2, 0x0, @loopback}, "0000407100eeffffff00000000000200"}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 23:45:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'v\x00', 0x43732e5398416f1a}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/208) 23:45:17 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:17 executing program 0: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)="d1", 0x1, 0xfffffffffffffffb) 23:45:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r0, 0x11, 0x0, 0x100000001) 23:45:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @rand_addr}, {0x0, @random="79d2106aa561"}, 0x0, {0x2, 0x0, @loopback}, "0000407100eeffffff00000000000200"}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 23:45:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000000000062) read(r1, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 23:45:17 executing program 0: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)="d1", 0x1, 0xfffffffffffffffb) 23:45:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @rand_addr}, {0x0, @random="79d2106aa561"}, 0x0, {0x2, 0x0, @loopback}, "0000407100eeffffff00000000000200"}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 23:45:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0xb9b5}) 23:45:17 executing program 0: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)="d1", 0x1, 0xfffffffffffffffb) 23:45:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @rand_addr}, {0x0, @random="79d2106aa561"}, 0x0, {0x2, 0x0, @loopback}, "0000407100eeffffff00000000000200"}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 23:45:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xffffffc3}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000001800120008000100767469000c000200080005c0e00000020800100000000000"], 0x1}}, 0x0) 23:45:17 executing program 2: r0 = socket(0xa, 0x2, 0x0) fchown(r0, 0x0, 0x0) 23:45:17 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x2}, 0x20) 23:45:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000058f000)="440d05030004000000001700ec", 0xd) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f000069d000), &(0x7f00006ccffc)=0x3cb) 23:45:17 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000010fab)="5500000018007fafb72d1cb2a4a280930a06050000a8071591052369250017000800001c010000000700a30700000000000000dc1338d54400b89b84136ef75afb83de448daa7227c43ab8220000060ce44fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 23:45:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 23:45:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0xb9b5}) 23:45:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0xb9b5}) 23:45:17 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:17 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) [ 106.016592] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. 23:45:18 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 23:45:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 23:45:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0xb9b5}) [ 106.118223] keychord: Insufficient bytes present for keycount 1 [ 106.646100] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 23:45:18 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x4, @mcast2}, 0x1c) 23:45:18 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 23:45:18 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f0000000000)=""/57, 0x39) 23:45:18 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:18 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:18 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) [ 106.960546] keychord: Insufficient bytes present for keycount 1 [ 106.975956] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 23:45:18 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7}, 0x7) 23:45:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f16}) dup2(r0, r1) [ 107.021689] keychord: Insufficient bytes present for keycount 1 23:45:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="73c8637572697479000000000000000000000000000000000000000000000000c40000004e8b4b1e7fa37c911d43b7dfc1540065d654e421e46aa38951600c59fba6f39cf52e9ec8402c4611921b902574450eb6fcc611bb94c632461f22877f4a2e09f5f448f8a2ef827ff78d79dbd147c4ecf7ea6ab6ab52f030b8fea1243b4a37836d692868843a8998fea04a0bc474078acbead561a51093ca99b61cb70a4bcff2d63475b53da144eda77f050eca0d4f941bfec0542fd99b2bd8823b38069af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976a615f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b567764532916a73e100e7310756f1153e6243ac5d9b4fe6efc118dbdbe423d6d903f08d6c7d317b8c29f53a5523c79f4852c1a781b724f395e63a79a5b6085a38ef7c15a3b9ee6efb3a88a77954b93b8a5e6a74d4e00ec7479c7c052fce69b3e16a2f4c168c59036e568e29ab58d65307faa511835b80000000042e18c5cfd2017000000eacf3a0f8c4ffa5d5cb6dbbef4ff3a863eab183d66a0938bfb49be369fa0dae46eb9cdf3aad01f877a76d1649210f64bf079878e650558719d505f86e360bdf7ee8b"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="00001a3719c6169d226a9ab295f5c04eba3bd67611c81055ade531d600694f0eccd7014b7e10000000000000000000000000000000000096e995d5cffdf44ddbb52e5068aa3d72e137a3c0a8411095c7ff46b8d72d977a0287a60601446a2aac53bfb4087d9416c8b3769796e65379d44ff035"]) listen(r2, 0x400000000000) renameat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x400, 0x48) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 107.091658] keychord: Insufficient bytes present for keycount 1 23:45:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f16}) dup2(r0, r1) 23:45:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f16}) dup2(r0, r1) 23:45:19 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f16}) dup2(r0, r1) 23:45:19 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f0000000000)=""/57, 0x39) 23:45:19 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:19 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x10001, 0x0, 0x6}, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x2, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e20}, 0x40, 0x3, 0x2b, 0x9, 0x80, &(0x7f00000002c0)='veth1_to_bridge\x00', 0xffffffffa020f225, 0x3f, 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000044c000/0x9000)=nil, 0x9000}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21}, {0x1, @link_local}, 0x18, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) tee(0xffffffffffffffff, r1, 0x7, 0xf) 23:45:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 23:45:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x14}) getgroups(0x0, &(0x7f00000000c0)) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:20 executing program 0: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$setown(r0, 0x8, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace(0x4207, r3) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000003, 0x0) 23:45:20 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x14}) getgroups(0x0, &(0x7f00000000c0)) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:20 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f0000000000)=""/57, 0x39) 23:45:20 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000009000/0x1000)=nil, 0x1000, 0xc) 23:45:20 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e1e}, 0x1c) 23:45:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x6) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000440)="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", 0x218, 0x8000, &(0x7f0000000000), 0x1c) close(r0) 23:45:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:45:20 executing program 2: add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)="f5", 0x1, 0xfffffffffffffffe) 23:45:20 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000100), 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) fstat(0xffffffffffffffff, &(0x7f0000000380)) fchmod(0xffffffffffffffff, 0x4) getgid() 23:45:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8955, &(0x7f0000000040)={{}, {0x0, @broadcast}, 0x0, {}, "6c6f00000000000000fdfdffff00"}) 23:45:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000400)) 23:45:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x70dff9) 23:45:21 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$TUNSETSNDBUF(r0, 0x401054d6, 0xfffffffffffffffe) 23:45:21 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x5f5) exit(0x0) getdents64(r1, &(0x7f0000000000)=""/57, 0x39) 23:45:21 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000100), 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) fstat(0xffffffffffffffff, &(0x7f0000000380)) fchmod(0xffffffffffffffff, 0x4) getgid() 23:45:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0xfffffffffffffffd) 23:45:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x14}) getgroups(0x0, &(0x7f00000000c0)) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:21 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:21 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000100), 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) fstat(0xffffffffffffffff, &(0x7f0000000380)) fchmod(0xffffffffffffffff, 0x4) getgid() 23:45:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:21 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:21 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000100), 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) fstat(0xffffffffffffffff, &(0x7f0000000380)) fchmod(0xffffffffffffffff, 0x4) getgid() 23:45:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r1, r2) 23:45:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x14}) getgroups(0x0, &(0x7f00000000c0)) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) fallocate(r1, 0x10, 0x0, 0xcd55) 23:45:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4, "ed19a62a"}, &(0x7f0000002480)=0x28) INIT: Id "1" respawning too fast: disabled for 5 minutes 23:45:22 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/2, 0x368) 23:45:22 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), 0x8) 23:45:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x3, "4bc3"}], 0x18}}], 0x2, 0x0) 23:45:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) [ 110.524477] binder_alloc: binder_alloc_mmap_handler: 6276 20000000-20002000 already mapped failed -16 23:45:22 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900080003000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 23:45:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0xfd06, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x80080) sendfile(r1, r3, &(0x7f0000000000), 0x6) write(r1, &(0x7f00000001c0)="b0", 0x1) sendfile(r1, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 110.655657] IPv6: Can't replace route, no match found 23:45:22 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 23:45:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 23:45:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 23:45:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 23:45:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 23:45:23 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:23 executing program 1: getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) clone(0x2302001ff9, 0x0, 0xfffffffffffffffe, &(0x7f00000031c0), 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000300)=""/238, 0xee) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0xffffffffffffffff) 23:45:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), 0x8) 23:45:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) sendfile(r4, r3, &(0x7f0000000240), 0x2000005) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) 23:45:23 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) unshare(0x20400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) 23:45:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="b34b09b0d64b8643f02dfa040601395a", 0x10}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 23:45:23 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000140)) 23:45:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team0\x00'}) close(r0) [ 111.652703] audit: type=1400 audit(1538696723.570:25): avc: denied { connect } for pid=6357 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:45:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) symlink(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file1\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') quotactl(0x2080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)) 23:45:23 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000100)="550000001e007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 23:45:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x10000000}}]}, 0x13c}}, 0x0) 23:45:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team0\x00'}) close(r0) 23:45:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000000)=0x3, 0x4) 23:45:24 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') pwritev(r1, &(0x7f0000001400), 0x2a6, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:45:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team0\x00'}) close(r0) 23:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), 0x8) 23:45:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r4, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000500)='highspeed\x00', 0x182) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r3, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000c40000004e8b4b1e7fa37c911d43b7dfc1540065d6549ec8402c4611921b902574450eb6fcc611bb94c232461f22877f4a2e09f5f448f8a2ef823ff78d79dbd147c4ecb6ab56f030b8fea1243b4a37836d692868843a8998fea04a0bc474078acbead56160ebd8b899b61c426c9382417876b70a4bcff2d634050eca0d4f941bfec0542feb9b2bd8823b383f9af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976a615f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b56776453712916a73e100e7310fe20402faf11d6fdd9b4fe6efc118dbdbe423d6d903f08d6c7d337b8c29f53a5523c79f4852c1a781b724f395e63a79a000000"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) sysinfo(&(0x7f00000003c0)=""/56) renameat(r3, &(0x7f0000000340)='./bus\x00', r3, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200001ff, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 23:45:24 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 23:45:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x800020, &(0x7f0000009000)}) 23:45:24 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0xfffffffffffffffd) ftruncate(r0, 0x0) [ 112.241602] sock: process `syz-executor3' is using obsolete setsockopt SO_BSDCOMPAT [ 112.257936] audit: type=1400 audit(1538696724.180:26): avc: denied { create } for pid=6400 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=key permissive=1 23:45:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team0\x00'}) close(r0) 23:45:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f00003c7ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x35, &(0x7f0000000000)=@dstopts, 0x8) 23:45:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b000000000100", 0x4014}) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 112.315168] binder: 6413:6417 transaction failed 29189/-22, size 0-0 line 3013 [ 112.323473] binder: 6413:6417 transaction failed 29189/-22, size 0-0 line 3013 [ 112.323603] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.358387] binder: undelivered TRANSACTION_ERROR: 29189 23:45:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 23:45:24 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f000000b000), &(0x7f0000048000), 0x0) 23:45:24 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) 23:45:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0x9, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 23:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), 0x8) 23:45:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) 23:45:25 executing program 0: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) io_getevents(r2, 0xce, 0x36b, &(0x7f0000000240), &(0x7f00000000c0)={0x77359400}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 23:45:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) 23:45:25 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000162000/0x1000)=nil, 0x1000, 0x4) 23:45:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 23:45:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000007504000001ed00001d040000000000006f460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) [ 113.202658] audit: type=1400 audit(1538696725.120:27): avc: denied { call } for pid=6474 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 113.234723] binder: 6474:6475 got transaction with fd, -1, but target does not allow fds [ 113.244672] binder: 6474:6475 transaction failed 29201/-1, size 24-8 line 3241 23:45:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000140)="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", 0x0) write$eventfd(r1, &(0x7f0000000100)=0x20, 0x8) sendfile(r1, r1, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)) [ 113.259365] binder_alloc: binder_alloc_mmap_handler: 6474 20fff000-21000000 already mapped failed -16 [ 113.273701] binder_alloc: 6474: binder_alloc_buf, no vma [ 113.275935] binder: BINDER_SET_CONTEXT_MGR already set [ 113.275945] binder: 6474:6475 ioctl 40046207 0 returned -16 [ 113.296289] binder: 6474:6486 transaction failed 29189/-3, size 24-8 line 3136 [ 113.304183] binder: undelivered TRANSACTION_ERROR: 29189 23:45:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 23:45:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x8, {0x2, 0x0, @broadcast}, 'ip6_vti0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) [ 113.309818] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.344428] binder: 6495:6496 got transaction with fd, -1, but target does not allow fds 23:45:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000580)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x58, 0x0, &(0x7f0000000600)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140), &(0x7f0000000280)=[0x0, 0x38, 0x28, 0x70]}}, @acquire={0x40046305, 0x2}], 0xa7, 0x0, &(0x7f0000000500)="d8bef687fb87f831e65211e31af5e165cb4b3acf317470b1c3e1409358167d138d5a4f7bc98b096d50d6ce8aedcbc013d91abc268ad74a6173883d4eadbc520dc058ed2cdca080409328c3ca0f68b36ae048185f2f714df56f42ce7fe8bd60cfa91deef43c65f74d6cfefbd308baae02cba659b5819dccfd6a8a745799f60c0cc8bf1c4651da8dfca8ec5b0b94d13c80b81f8560890f7c74b28c96002ff288c8b5661f2ae7baa6"}) 23:45:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 23:45:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) [ 113.367396] binder: 6495:6496 transaction failed 29201/-1, size 24-8 line 3241 [ 113.387546] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.414393] audit: type=1400 audit(1538696725.330:28): avc: denied { transfer } for pid=6502 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 113.433888] binder: BINDER_SET_CONTEXT_MGR already set [ 113.433896] binder: 6507:6508 ioctl 40046207 0 returned -16 [ 113.434056] binder: 6507:6508 got transaction with fd, -1, but target does not allow fds [ 113.434079] binder: 6507:6508 transaction failed 29201/-1, size 24-8 line 3241 [ 113.434390] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.472390] binder: 6502:6511 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 113.472402] binder: 6502:6511 got transaction to context manager from process owning it [ 113.472415] binder: 6502:6511 transaction failed 29201/-22, size 0-32 line 3004 [ 113.539361] binder: send failed reply for transaction 15 to 6502:6503 [ 113.546188] binder: undelivered TRANSACTION_COMPLETE [ 113.551375] binder: undelivered TRANSACTION_ERROR: 29189 23:45:26 executing program 2: mprotect(&(0x7f00001eb000/0x3000)=nil, 0x3000, 0xfffffffffffffffc) 23:45:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000301ffff008f00003d88c2000010ae1b"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 23:45:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 23:45:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000900)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000040)=""/54, 0x36) 23:45:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) 23:45:26 executing program 5: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000000000), &(0x7f0000000180), 0x4020000001) 23:45:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fstat(r1, &(0x7f0000000440)) getegid() getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14, 0x80000) 23:45:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) [ 114.145313] binder: 6525:6533 got transaction with fd, -1, but target does not allow fds [ 114.162108] binder: 6525:6533 transaction failed 29201/-1, size 24-8 line 3241 [ 114.174695] binder: undelivered TRANSACTION_ERROR: 29201 23:45:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={"0000000000000000000000000200", 0x1003}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 23:45:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) [ 114.199372] audit: type=1400 audit(1538696726.120:29): avc: denied { read } for pid=6526 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:45:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x5000560) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:45:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x5000560) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:45:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) 23:45:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000400)=0xffffffffffffffda, 0x360) [ 114.325959] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 23:45:26 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='mountinfo\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x24c) 23:45:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x5000560) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:45:26 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x5000560) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:45:26 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='mountinfo\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x24c) 23:45:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fstat(r1, &(0x7f0000000440)) getegid() getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14, 0x80000) 23:45:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='mountinfo\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x24c) 23:45:27 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000008dc0)='./file1\x00') unlink(&(0x7f0000000040)='./file0\x00') lseek(r0, 0x5c689bef, 0x0) 23:45:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(&(0x7f0000000440)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000480)="21776c616e318000000000") sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@random={'user.', 'md5sumbdev-\x00'}) 23:45:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fstat(r1, &(0x7f0000000440)) getegid() getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14, 0x80000) 23:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:45:27 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000ac0)='mountinfo\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xcb49) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x24c) [ 115.230358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13361 sclass=netlink_route_socket pig=6608 comm=syz-executor3 23:45:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:45:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(&(0x7f0000000440)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000480)="21776c616e318000000000") sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@random={'user.', 'md5sumbdev-\x00'}) [ 115.383476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13361 sclass=netlink_route_socket pig=6627 comm=syz-executor3 23:45:27 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={0xfffffffffffffdb0}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) [ 115.512173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13361 sclass=netlink_route_socket pig=6638 comm=syz-executor3 23:45:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:45:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(&(0x7f0000000440)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000480)="21776c616e318000000000") sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@random={'user.', 'md5sumbdev-\x00'}) 23:45:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/153, 0x99}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fstat(r1, &(0x7f0000000440)) getegid() getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14, 0x80000) 23:45:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100570aa8f7410400000000fcff", 0x58}], 0x1) 23:45:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[]) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) [ 115.685124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13361 sclass=netlink_route_socket pig=6653 comm=syz-executor3 23:45:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount(&(0x7f0000000440)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000480)="21776c616e318000000000") sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@random={'user.', 'md5sumbdev-\x00'}) 23:45:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 115.843765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13361 sclass=netlink_route_socket pig=6666 comm=syz-executor3 23:45:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:45:28 executing program 3: clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x10, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), &(0x7f0000000380)=""/76, 0x4c, &(0x7f0000000500)={&(0x7f0000000400)={'rmd160-generic\x00'}, &(0x7f0000000440)="5ee75ae44a30a0293ab2e10ba7c4547dd11ffb405914a0915895760bc9d1f3a9f49688fd1346398cf87c81a3f10cfcaa8d445d7835fcd5d0b24ed5a1c66403b3022ab5d847c8845e220e96054a9c6c4c9103e3843f0857aeeb95f9ec56f153c726265cc8327f2a82d5a8c84e8acb74d0c623167012219b66e63d2f58902a4ac0a1865ef7f20bfcd7a0e9e5c8e5e4b1fe61b481d0109fbc0d", 0x98}) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, 0x0, 0x36, 0x0, 0x1, 0xfffffffffffffff7}) 23:45:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="73c8637572697479000000000000000000000000000000000000000000000000c40000004e8b4b1e7fa37c911d43b7dfc1540065d654e421e46aa38951600c59fba6f39cf52e9ec8402c4611921b902574450eb6fcc611bb94c232461f22877f4a2e09f5f448f8a2ef823ff78d79dbd147c4ecf7ea6ab6ab52f030b8fea1243b4a37836d692868843a8998fea04a0bc474078acbead561a51093ca99b61cb70a4bcff2d63475b53da144eda77f050eca0d4f941bfec0542fd99b2bd8823b38069af93bc9c8b8578b5ed8ba7d2084ab94919aea43e1e3acfd6d899dd2159976a615f1279aaf23ce57319edb9be03d5b8472a0af33321a4d9b56776453712916a73e100e7310756f1153e6243ac5d9b4fe6efc118dbdbe423d6d903f08d6c7d317b8c29f53a5523c79f4852c1a781b724f395e63a79a5b6085a38ef7c15a3b9ee6efb3a88a77954b93b8a5e6a74d4e00ec7479c7c052fce69b3e16a2f4c168c59036e568e29ab58d65307faa511835b800000000000000eacf3a0f8c4ffa5d5cb6dbbef4ff3a863eab183d66a0938bfb49be369fa0dae46eb9cdf3aad01f877a76d1649210f64bf079878e650558719d505f86e360bdf7ee8bee8e393aebbc79"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:45:28 executing program 2: prctl$intptr(0x34, 0x0) 23:45:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"76a300000000000000f2ff0100", 0x3105}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:45:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 23:45:28 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xb9) keyctl$get_persistent(0x3, r2, 0x0) 23:45:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @dev}, 0x10) 23:45:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000140)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 116.245955] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 23:45:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[]) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 23:45:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x4000000000000001, 0x6) 23:45:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6dc6000000"], 0x5) creat(&(0x7f0000000380)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="dd"], 0x1) sendfile(r4, r4, &(0x7f00000000c0), 0xfff) sendfile(r1, r4, &(0x7f0000000140), 0x8fff) 23:45:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:45:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/48) 23:45:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000400)) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = memfd_create(&(0x7f0000000180)='syz1\x00', 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0xfffffffffffffe84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='htcp\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) write(r4, &(0x7f0000000480)="b2cf691ae07fcba019ebbd608319272fab37a71632517fc6ea632764b345fa475d494fbe60cf259fd297b6a2", 0x2c) select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)={0x77359400}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000bf550800000000040000000000107fbe59a6c73508d8475ce5dcbc4649cdac1a3719c6169d76611cea4c14694f0eccd7014b7e"]) listen(r3, 0x400000000000) renameat(r4, &(0x7f0000000340)='./bus\x00', r4, &(0x7f0000000380)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x200, 0x0) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x4000000000001a, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 23:45:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xff60}, 0xe3c7) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[]) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 23:45:28 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000200)="6c6f00966fd651b159a9c84a2c60d29800000020") 23:45:28 executing program 4: r0 = epoll_create(0x4) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)='5', 0x1}], 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 23:45:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 23:45:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a65686410721ee2db6a74e3332653") fcntl$setstatus(r0, 0x4, 0x5ffe) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180), 0x20) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x48204) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) pread64(r0, &(0x7f0000002000)=""/4096, 0xfffffd80, 0x0) 23:45:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 117.363130] ------------[ cut here ]------------ [ 117.367907] kernel BUG at fs/ext4/inode.c:2062! [ 117.372566] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 117.377913] Modules linked in: [ 117.381245] CPU: 0 PID: 354 Comm: jbd2/sda1-8 Not tainted 4.9.131+ #102 [ 117.387993] task: ffff8801d4c00000 task.stack: ffff8801d4c08000 [ 117.394040] RIP: 0010:[] [] ext4_writepage+0xbe5/0x1860 [ 117.402740] RSP: 0018:ffff8801d4c0f4c0 EFLAGS: 00010293 [ 117.408219] RAX: ffff8801d4c00000 RBX: 0000000000048204 RCX: ffffea00068ee700 [ 117.415492] RDX: 0000000000000000 RSI: ffffffff816d8405 RDI: ffff8801d4195af0 [ 117.422752] RBP: ffff8801d4c0f5c0 R08: 0000000000024bb0 R09: 0000000000000000 [ 117.430014] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff82ad73a0 [ 117.437279] R13: ffffea00068ee700 R14: ffffea00068ee700 R15: ffffea00068ee700 [ 117.444537] FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 117.452758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.458632] CR2: 0000000000708934 CR3: 00000001d3055000 CR4: 00000000001606b0 [ 117.465916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.473172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.480433] Stack: [ 117.482575] ffff8801d4c0f5b8 ffffffff814c1f1d ffffea00068ee710 ffffea00068ee708 [ 117.490643] 1ffff1003a981ea3 ffff8801d4c0fb50 ffff8801d4195aa0 ffff8801d4c0f6b8 [ 117.498706] ffffea00068ee700 0000100000000009 ffff8801d4c008a8 0000000041b58ab3 [ 117.506771] Call Trace: [ 117.509358] [] ? page_mkclean+0x12d/0x1d0 [ 117.515155] [] ? ext4_writepages+0x2e00/0x2e00 [ 117.521469] [] ? check_preemption_disabled+0x3b/0x170 [ 117.528294] [] __writepage+0x64/0xc0 [ 117.533656] [] write_cache_pages+0x4d5/0xe80 [ 117.539698] [] ? __test_set_page_writeback+0x680/0x680 [ 117.546610] [] ? clear_page_dirty_for_io+0x4d0/0x4d0 [ 117.553356] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 117.560095] [] generic_writepages+0xda/0x150 [ 117.566140] [] ? balance_dirty_pages_ratelimited+0x24a0/0x24a0 [ 117.573746] [] jbd2_journal_commit_transaction+0xdea/0x65e0 [ 117.581092] [] ? journal_submit_commit_record+0xa20/0xa20 [ 117.588262] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 117.595030] [] ? debug_object_deactivate+0xf7/0x340 [ 117.601681] [] ? debug_object_deactivate+0x214/0x340 [ 117.608444] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 117.615358] [] ? debug_object_deactivate+0x214/0x340 [ 117.622095] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 117.629473] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 117.636295] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 117.643202] [] ? detach_if_pending+0x430/0x430 [ 117.649417] [] ? del_timer_sync+0x11c/0x140 [ 117.655373] [] kjournald2+0x22a/0x830 [ 117.660808] [] ? finish_task_switch+0x1ed/0x640 [ 117.667111] [] ? commit_timeout+0x20/0x20 [ 117.672893] [] ? autoremove_wake_function.part.0+0x130/0x130 [ 117.680327] [] ? __kthread_parkme+0x175/0x240 [ 117.686474] [] kthread+0x26d/0x300 [ 117.691659] [] ? commit_timeout+0x20/0x20 [ 117.697442] [] ? kthread_park+0xa0/0xa0 [ 117.703050] [] ? __switch_to_asm+0x34/0x70 [ 117.708917] [] ? kthread_park+0xa0/0xa0 [ 117.714525] [] ? kthread_park+0xa0/0xa0 [ 117.720132] [] ret_from_fork+0x5c/0x70 [ 117.725660] Code: 4d 85 ed 75 ba e8 7c 31 c4 ff 65 ff 0d a5 f9 93 7e 0f 85 34 f5 ff ff e8 6a 31 c4 ff e8 bd 9e 92 ff e9 25 f5 ff ff e8 5b 31 c4 ff <0f> 0b e8 54 31 c4 ff 48 8b 85 40 ff ff ff f0 80 60 01 fe e8 43 [ 117.752917] RIP [] ext4_writepage+0xbe5/0x1860 [ 117.759264] RSP [ 117.778858] ---[ end trace 39c4aa7f9887bc32 ]--- [ 117.783738] Kernel panic - not syncing: Fatal exception [ 117.789484] Kernel Offset: disabled [ 117.793095] Rebooting in 86400 seconds..