[ 14.335165] audit: type=1400 audit(1575202724.016:4): avc: denied { syslog } for pid=1924 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.153' (ECDSA) to the list of known hosts. 2019/12/01 12:18:55 fuzzer started 2019/12/01 12:18:56 dialing manager at 10.128.0.26:37885 2019/12/01 12:18:56 syscalls: 1373 2019/12/01 12:18:56 code coverage: enabled 2019/12/01 12:18:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/12/01 12:18:56 extra coverage: extra coverage is not supported by the kernel 2019/12/01 12:18:56 setuid sandbox: enabled 2019/12/01 12:18:56 namespace sandbox: enabled 2019/12/01 12:18:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/01 12:18:56 fault injection: kernel does not have systematic fault injection support 2019/12/01 12:18:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/01 12:18:56 net packet injection: enabled 2019/12/01 12:18:56 net device setup: enabled 2019/12/01 12:18:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/01 12:18:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:19:29 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x542bf6e1506b2837) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r1 = inotify_init1(0x800) flock(r1, 0x9) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xca, 0xa, 0x81, "be4579f1e76c9f99983452e85d701e88", "457f34022a0f62713cbb3213d44b691bce8201be064ac8c2bf9b3c6b531470d3411770f8e581d22f69df7f7f5cfd5ce3c73c69eaf11e75682d8fc457ef21ee205bdb9d770b534bbe90b0578d034e286067b60b9b06fe9a3abc8a05e44d9de893e62e7b3e323bfeee7dce2d670fecbf9f6531a0344e8a01a006f771aa89aea333ab42e85adf273acdea0707ef16c65e71b37db6a1bddb6a50456357bb654f89ae9bc79ecb5b61df92d3a21e11cad8a91a05bb022865"}, 0xca, 0x1) r4 = socket$inet(0x2, 0x2, 0x1) fcntl$setflags(r4, 0x2, 0x98c5d9de096afe4a) fallocate(r3, 0x20, 0x2, 0x4) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000002c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPTPEER(r6, 0x5441, 0x9) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ASHMEM_SET_SIZE(r8, 0x40047703, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f00000003c0)={r9, 0x1, 0x6, @link_local}, 0x10) write$selinux_access(r0, &(0x7f0000000400)={'system_u:object_r:ssh_keysign_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x7}, 0x4d) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000480)=0x4) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000500)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)={@dev={0xfe, 0x80, [], 0xf}}, 0x14) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip6_tables_names\x00') r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$FOU_CMD_GET(r11, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r12, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x400000, 0x0) r14 = getpgrp(0x0) ioctl$TIOCSPGRP(r13, 0x5410, &(0x7f0000000780)=r14) 12:19:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x100040, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x7) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x400}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x202, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)='ip6erspan0\x00', 0x6, 0x0, 0x100}) write$binfmt_elf64(r2, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0xeb, 0x1f, 0x0, 0x2, 0x3, 0x6, 0x7, 0x3c8, 0x40, 0x29e, 0x4, 0x0, 0x38, 0x1, 0xff, 0x0, 0x5}, [{0x6474e551, 0xd3, 0x0, 0x4, 0x1000, 0x4, 0xf96b, 0x7fff}], "f57f34e3271ddec0df59065b915adf6b12e8034fad2793b2e243b239a20130cda5dfbf6a57c45e4a71fd51aadcd3cf1162db58bbb746b9e889", [[], [], []]}, 0x3b1) open(&(0x7f0000000800)='./file0\x00', 0x400, 0x100) r3 = open(&(0x7f0000000840)='./file0\x00', 0x100, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06055c8, &(0x7f0000000900)={0x7, 0x53d3, {0x53, 0x8, 0x401, {0x4, 0x8}, {0x7ff, 0x400}, @period={0x5a, 0x80, 0x0, 0x0, 0x8, {0xff00, 0x8, 0x7, 0x1}, 0x2, &(0x7f0000000880)=[0x41, 0x4]}}, {0x53, 0x8f10, 0x9, {0x3}, {0x4, 0x3}, @period={0x5b, 0x20, 0x1, 0x6, 0x7ff, {0xec2, 0x0, 0x1000, 0x81}, 0x8, &(0x7f00000008c0)=[0x80, 0xd75a, 0x8, 0x0, 0x5, 0x7, 0x0, 0x80]}}}) r4 = dup(r3) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000980), 0x4) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000009c0)={0x1, 0x6, [@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}, @remote, @broadcast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}]}) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x114, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc41f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f8a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000c00)={0xadb}, 0x8, 0x0) write$binfmt_elf64(r6, &(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0xfe, 0x8, 0xfc, 0x3, 0x3e, 0x10001, 0x34c, 0x40, 0xa1, 0x7, 0x1, 0x38, 0x2, 0x8, 0x101, 0x401}, [{0x7, 0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x80000001}, {0x84076b918e66865d, 0x8, 0x1331233d, 0x0, 0x5, 0x6, 0x6, 0xd83d}], "5c3eb663c0e2a3f16779bebe67cd25357fd9c649559bb8", [[]]}, 0x1c7) r7 = syz_open_dev$evdev(&(0x7f0000000e40)='/dev/input/event#\x00', 0x0, 0x800) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000000e80)=0x10000) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/self\x00', 0x8402, 0x0) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000f00)="1c3b5e69d1ab147c30a6cf3b2c5203b59cc62f2963ad3adc26899870e4231858d9cba70a44e091de5a907de01ed7a89fb30ce213612213e8b5de19422ada548acb4de8a6d80bb7e162c92dcfe3fa8a1728fc10a3d8dfbbbe783f2d0c2a2026c05ae2919c3bac6fb6df2963f7f5538082ed7b76c34a93d50b1f33139c92fc95769b8beb6ce09b0dc69d1b0ca86a469976c767b3368b81096fc20d449e867289dfabfa33a3cd109e2662abe986b81b3d7c55e7845cdbf76b43b1a9c360ff3979b81562274f3bd6b1d8d5476ccac1fd6012240358573fdb72103dcc84c8da1769d4a5227985a27659679d6abe5b5aacfad15281f64919a7bb2d9d12e4c8a37b9120") openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self\x00', 0x400400, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x101000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x41200824}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, r10, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1008}, 0x401c800) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000011c0)=@gcm_128={{0x304}, "c13dfeb19934dbe9", "b8cc7722cf8c39de21e325fe0e7636c4", "d8b8fa36", "16acd4f5dc59e8ed"}, 0x28) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000001240)={{0x2, 0x4e20, @broadcast}, {0x306}, 0x10, {0x2, 0x4e20, @loopback}, 'ifb0\x00'}) 12:19:29 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0xd00, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6fbe}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0xc}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0xc810) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') removexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='system.advise\x00') chroot(&(0x7f0000000380)='./file0\x00') r3 = socket$inet(0x2, 0x2, 0xd9) io_setup(0x74a, &(0x7f00000003c0)=0x0) io_cancel(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000400)="1ce38f6c7a9f8337cea3d9f53579f0dd45b27c0d6c8f5b986c2b716775fa368bd0bb63a370196aeacb598d73a5fd6c6e35fef8037c68da37eb4ba9f2e2b83d315a4c6ac2974ba88fd34d84e7a501fb8b7b8b1cee8eb79bc8afd67d12b7d2c2abb859b1feb6470c4eeba0159bf3426eb3318a9bb4b12aa52c59d4b577713dc79740d4df437a9bd50fcb8e6bceb99b9568f8c7d6216c5b9881189354acfd0332e68f5802f6360931e0d8316529ede48410db4065fd7f240f234f4495fc2c5650de052cf8ca08a304bb95ffaeee59eb4320b801b1fda8ee9db97fee6662a376608235e26329f25ef842459cfc170c33624a5c0b46602587f1ff", 0xf8, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000540)) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x242, 0x0) sendmsg$inet(r5, &(0x7f00000019c0)={&(0x7f00000005c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000600)="e59b370d49270de5d72ede051eb94fa978a73de28dc7c631f2d4b610e9cb400bc81abeb0c4bbf260c06a16f6c7bb56045c487ff294c1af43505c814d173ac2ce5911e939c7dbd95dfae2500c2aa4a7f15602b036ecee0bafabfee29479d82a542d804d5ee8c0348360681dad2e44bc16bfe6e341628f8eebc2cca7ab75113fe1861bbdf9e6dcd77a3c9d7fac0c85eb5efee1dc59ee7dc1071c827d66d8463af1d953d7f84c910187f1c463ca838ff1b5b4d53d8c975b23a67e3a1a28269d10ac2e03fd0ff2ab6eab24f4f8b9afcd5851daae0e", 0xd3}, {&(0x7f0000000700)="1cecffc8ed32ac5af6c96c8d44e4709c20c50c61e5c3fbc9b05a63d48156bfc50864c56eba00d3c3cb5b2802b2d335756c432700f3bb57f1e83235b3640457423b193e8136169ae01a652872b98db3e38e45ac36cdd2f37938bbab4b528d539eb127d9b1485ba943c8c293b7e0ec1d0628243e87e851097add32e7c3fcb493554e7f5b6650860a23a7245a31399b", 0x8e}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="21d021449652cf5beb49335460893323b17a7e3a3d796bab649f79a7eca0573039eb03479e991e59", 0x28}, {&(0x7f0000001800)="1b4f299a398f3b21e03d0d71da6defb24f3f93d6685d16d2f9e223445e31a4910ecb98a21be07d6756c78b353f276c225aa1b499e5863f6c60982cbb0a9dc3e95a1dd27979a3efe0e950421f1c34d88d0f464f6c55ce", 0x56}, {&(0x7f0000001880)="0eb9ccdbc5e4d2ed6cdfa07dcd4e3b75ac7f224a3b49a3ba451e42563cddf091daf701c46878b167e58dffd19a8ccab9f9e8b21b1d2c8dfdf3ef89c2be048b5f391999e67f3d6624c6f3a4fde23e41f964fc", 0x52}, {&(0x7f0000001900)="321b26a1e12be419b75a0e978b485bc992ee70e6419f2c732617774572b85f71293f01c560108624417268ef6dd4", 0x2e}], 0x7, &(0x7f0000001980)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x81}}], 0x10}, 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x7c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r7 = add_key(&(0x7f0000001b80)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="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", 0x1000, 0xfffffffffffffff8) keyctl$update(0x2, r7, &(0x7f0000002c00)="e183804093375fd015ced3297040a7695f467a5de4170309850e9a901098a158e5b55dd06a6d3fafb6f7a840a3ca26c8a2ae03d6c26d23c92fb7913260bf9b828b92d2153a60cc7426a586d07b41e6dcc25b50b80b1006cbcebf83d150a10b2d7866b38235b471b8ed0109901564da3efbdb5173fe3c3f1f083aceac390bf363", 0x80) fcntl$addseals(r0, 0x409, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002c80)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000002cc0)='projid_map\x00') lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() chown(&(0x7f0000002d00)='./file0\x00', r10, r11) lsetxattr$security_capability(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)='security.capability\x00', &(0x7f0000002e80)=@v1={0x1000000, [{0xc00, 0xf4}]}, 0xc, 0x1) r12 = openat$cgroup_ro(r9, &(0x7f0000002ec0)='cpuacct.stat\x00', 0x0, 0x0) write$char_usb(r5, &(0x7f0000002f00)="cb90a6ffcb210bae60d44e01e7581cf80211e8aca54b73021d97fc6c898474db3b3da536dd69e8f0a64255714fefc23055741fa9892cfa11127c2ddec5efe310387aa7672e78d721b404876a2419787c15e84348e5653c265ba0ec83954a3d587994c246818a71e357fdc4c280e411dbfbd1e4bee141de", 0x77) r13 = syz_open_procfs(0x0, &(0x7f0000002f80)='stat\x00') ioctl$FS_IOC_ENABLE_VERITY(r13, 0x40806685, &(0x7f0000003100)={0x1, 0x1, 0x1000, 0x1e, &(0x7f0000002fc0)="3b8c62132ceace6347e9ab1e5210576826dbeafd6eca86abebeda7e687e8", 0xc8, 0x0, &(0x7f0000003000)="6b8c32c030c9d47ebb2e4089173cc5c7c3250e0e33404f3a193db834ac59ce0c3ea1522b18451873ea8277174895d0623d5d4b3facd2c95b28d99d6103e8d2c970ae61784c6b614847d0874f9da8f89e159465a637d6091ba3617061721992f2ec9fa223610d71b143fc681f1dc785f989b66e7047a4e29ca16792f44d6592afaf4511f4521143d0e090273d1035d336fa38d5075dc3b93872aa4ecafe282e597dba841e9c6621d8db474f2277279c4cc9b30d011604400e95dab0227f509a76193ecc297ba5e04f"}) r14 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003240)='/selinux/enforce\x00', 0x301001, 0x0) r15 = syz_genetlink_get_family_id$team(&(0x7f00000032c0)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000003300)={@remote, @broadcast, 0x0}, &(0x7f0000003340)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000008540)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000008640)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000008680)={@initdev, 0x0}, &(0x7f00000086c0)=0x14) getsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000008780)={@local, @local, 0x0}, &(0x7f00000087c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000008800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r14, &(0x7f0000008b00)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0xa0050001}, 0xc, &(0x7f0000008ac0)={&(0x7f0000008840)={0x24c, r15, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r16}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000000}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x174, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 12:19:29 executing program 2: io_setup(0x214b, &(0x7f0000000000)=0x0) io_destroy(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f00000000c0)=r1) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000100)=0x7fff) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, r3, 0x6, 0x1, 0xfffffffffffffff8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000200)) r5 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="d5fcd6b0aa3a21975c3d2562fb7601fa88d5e9f312c3b3bf361379282135019fbc6782bd6451c823085a4712a212d3202e7e61153f9e8a885450dd68dd57b993bea8634b70c7c417d7b5af9a1f2f806024a1cce0b9e66c021ca7247a48c1be3540f7b7441573fb2667a86f9e321da1ceeea01498bf2ec32c63276b51028ff8894db7655b657648e47a8f4dda67307562f8119a6427409a32b6ed8ec8abba5cf2defe1028cfda664bfd99de9cb4817f5436902867da50f29f1fe4eab794dd34b78ef74be8f32d97148caef63de3aa5867aaad6f48f59ccbe5aef2d21df98e7af03cc3cdb7e931d70aaf5448ea70aed579cbf088", 0xf3, 0xfffffffffffffffe) keyctl$describe(0x6, r5, &(0x7f00000003c0)=""/229, 0xe5) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x6) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000b80)=@broute={'broute\x00', 0x20, 0x2, 0x594, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0x6747248f2730af69, 0x2, [{0xe82f1cca53495740, 0x24, 0x809b, 'lapb0\x00', 'bridge0\x00', 'vlan0\x00', 'bond_slave_1\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0x7f], @link_local, [0x0, 0x0, 0xff, 0x0, 0xff, 0x7f], 0x6e, 0xb2, 0xda, [], [@common=@ERROR={'ERROR\x00', 0x20, {"474fd165c556cf05d78d4c062bcc4c8b1828796cfbea0ce5d1ea1e4105b6"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x3}}}}, {0x3, 0x10, 0x22f0, 'bridge_slave_0\x00', 'hwsim0\x00', 'hsr0\x00', 'nr0\x00', @dev={[], 0x17}, [0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x3be, 0x3e6, 0x42a, [@bpf0={'bpf\x00', 0x208, {{0x32, [{0x9, 0x1, 0x9, 0xf06}, {0x33, 0x1, 0x9, 0x8}, {0x37, 0x1, 0x0, 0x73f}, {0x1000, 0x9, 0x91, 0x3}, {0x400, 0x6, 0x4, 0x8}, {0x6, 0xf0, 0xbf, 0x7}, {0x0, 0x4, 0xaf, 0x1000}, {0x2, 0xbc, 0x92, 0x2000}, {0x8001, 0x1, 0x3, 0xfff}, {0x800, 0x2, 0x0, 0xfb18}, {0x0, 0x80, 0xff, 0x3}, {0x7, 0x0, 0x3f, 0x20}, {0x5, 0x20, 0x1, 0x100}, {0x8, 0xe0, 0x0, 0xffffffff}, {0x7, 0x81, 0x2, 0x7fb}, {0x3f, 0xff, 0x1, 0xa233}, {0x4, 0x1, 0x2, 0x8001}, {0x1, 0x8, 0x4, 0x4}, {0x3, 0x9, 0x0, 0x3f}, {0x5, 0x2, 0x6, 0x9}, {0x3, 0x1, 0xce, 0x1ff}, {0x7, 0x1, 0x9, 0x7}, {0x6, 0xff, 0x9, 0x2}, {0x2, 0x7, 0x7, 0x2b}, {0x7, 0x6, 0x80, 0xfffff673}, {0x5, 0x2, 0x25, 0x7}, {0xea6, 0x2, 0x0, 0xff}, {0x1, 0x9, 0x4, 0x7}, {0x7f, 0x7, 0x9, 0x3}, {0x8ef, 0x1, 0x5, 0x1}, {0xfb, 0x0, 0xb3, 0x1f}, {0xf96, 0x3, 0x40, 0x1}, {0x3, 0x7, 0xff, 0xfff}, {0x9cd, 0xba, 0x40, 0x2}, {0x66, 0xff, 0x5, 0xff}, {0xfff, 0x2, 0x7, 0x7fffffff}, {0x8, 0x4, 0x9, 0x6}, {0x4, 0x6, 0x80, 0x81}, {0x1ff, 0x1, 0x60, 0xbe00}, {0x3, 0x40, 0x8, 0x1}, {0x4, 0x5, 0x60, 0x800}, {0x1375, 0x4, 0x4, 0x7}, {0x8587, 0x5, 0x20, 0x8}, {0x5, 0x5, 0x9, 0x7ff}, {0x46f1, 0x2, 0x7f, 0x2}, {0x7fff, 0x46, 0x0, 0x8000800}, {0x2, 0x5, 0x5, 0x9}, {0x6, 0x3, 0x9, 0x4}, {0x9, 0xfc, 0x81, 0x8000}, {0x3, 0x5, 0x0, 0x8000}, {0x401, 0x80, 0x3, 0x10000}, {0x5, 0x0, 0x3d, 0x3}, {0x1, 0xb9}, {0x101, 0x20, 0x1, 0xf343}, {0x6, 0x8a, 0x7, 0xfff}, {0x1f, 0x12, 0x40, 0x101}, {0x3, 0x5a, 0x3f, 0x5}, {0x1, 0x7, 0x1, 0x2}, {0xfbf, 0xc9, 0x0, 0x9}, {0x2, 0xff, 0x7, 0x9}, {0x4, 0x1f, 0x6, 0x9}, {0xe0c, 0x7, 0x1, 0x9}, {0x800, 0x3, 0x0, 0x20}, {0x200, 0x3f, 0x1, 0x7f}], 0x6b6fb434}}}, @comment={'comment\x00', 0x100}], [@common=@redirect={'redirect\x00', 0x4, {{0xffffffffffffffff}}}], @common=@ERROR={'ERROR\x00', 0x20, {"19281ea94891a40b0620b5b1a8bd1aabf7caff2f308b77372012378ce2c9"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000001}]}, 0x5e4) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/full\x00', 0x80, 0x0) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000000c40)={0x2, 0x1}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/null\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x4) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/vga_arbiter\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) futimesat(r9, &(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d80)={{r10, r11/1000+30000}, {0x0, 0x2710}}) r12 = accept4(r4, &(0x7f0000000dc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000e40)=0x80, 0x80800) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000e80)={0x1, 0x2}, 0x8) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000f40)={0x9, &(0x7f0000000ec0)=[{0x4, 0x2, 0xb, 0xfffffe9f}, {0x3, 0x6, 0x4, 0xfffffffc}, {0x8, 0xe9, 0x5, 0x2}, {0x2, 0x1, 0xab, 0x2d}, {0x1000, 0x0, 0xd7, 0x9}, {0x8, 0x3f, 0x7, 0x8}, {0xe2f6, 0x8, 0x1f, 0x3}, {0xf0f, 0x4a, 0x2}, {0x100, 0x9, 0x5, 0x7}]}) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, &(0x7f0000000f80)={0x0, 0xe0c5, 0x2, 0x3f, 0x6, [{0xdf, 0x40, 0x5, 0x0, 0x0, 0x2888}, {0x7, 0xffff, 0x0, 0x0, 0x0, 0x100}, {0xffffffffffffff14, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x0, 0x0, 0x200}, {0x4, 0x5, 0x9}, {0x0, 0x100, 0x4, 0x0, 0x0, 0x1}, {0x7, 0x8, 0x2e9, 0x0, 0x0, 0x1000}]}) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_SCRNMAP(r14, 0x4b40, &(0x7f0000001140)=""/175) 12:19:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket(0x10, 0xa, 0x4a) r2 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="6c98b9f6ea654c3caa85116c174bded25d8cf4105f2b736b040cab8fd2ede9361bc361dfa56bfff7527488085aa2ac326c40542ad0b080652e4daf80b116b8c05a1ae0115c54581ead2f59c4", 0x4c, 0xffffffffffffffff) keyctl$clear(0x7, r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x90002, 0x249) ioctl$KDSETLED(r3, 0x4b32, 0x1) r4 = socket$netlink(0x10, 0x3, 0x12) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb9b43c08cc43f66a) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000240)={'ip6gre0\x00', 0x3ff}) r7 = accept4(r6, &(0x7f0000000280)=@nfc, &(0x7f0000000300)=0x80, 0x100800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000340)) r8 = memfd_create(&(0x7f00000003c0)='syz', 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @adiantum, 0x703da3c104f1aeff, "13b8ba629ecbf92b"}) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r9, 0x80285442, &(0x7f0000000480)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, r3, 0x4768c000) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {r10, r11+10000000}}, &(0x7f0000000540)) prctl$PR_SET_UNALIGN(0x6, 0x0) setns(0xffffffffffffffff, 0x10000000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000005c0)={0x8, 'vxcan1\x00', {'veth1_to_bridge\x00'}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r12, 0x12) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000680), &(0x7f00000006c0)=0x8) r13 = dup3(r7, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(r13, 0x4b70, &(0x7f0000000700)) 12:19:29 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x140000, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='{selfem1\x00', &(0x7f00000000c0)='ppp0@!ppp0\x00', &(0x7f0000000100)=']user:[\x00', &(0x7f0000000140)='ppp0vmnet1\x00', &(0x7f0000000180)='bdev# cpusetposix_acl_accessppp1wlan1\x00', &(0x7f00000001c0)='&vmnet0#vboxnet0cgroup\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='^\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='ppp0vmnet1\x00', &(0x7f0000000300)='nodevsystem\x00', &(0x7f0000000340)='@+\\*lo\x00', &(0x7f0000000380)='-\x00', &(0x7f00000003c0)='[eth1md5sum@]&lo\'\'\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='!\x00'], 0x1000) r1 = dup(r0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000004c0)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLERROR(r2, &(0x7f0000000540)={0xb, 0x7, 0x1, {0x2, '^\x00'}}, 0xb) r3 = open$dir(&(0x7f0000000580)='./file0\x00', 0xc440, 0x40) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000005c0)) r4 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000700)={0x2}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000780)={{0x88, @loopback, 0x4e22, 0x2, 'dh\x00', 0x39, 0x2, 0x13}, {@multicast1, 0x4e20, 0x2000, 0xff, 0xff, 0x6}}, 0x44) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/enforce\x00', 0x40, 0x0) fstat(r6, &(0x7f0000000840)) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000900)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000940)=0x0) setpriority(0x2, r8, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000980)=@v1={0x0, @adiantum, 0x2, "8a8e416cc8a24d66"}) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x18, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000ac0)=""/193) r10 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x400000, 0x98) getsockopt$inet6_tcp_int(r10, 0x6, 0xc, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000d40)={0x10001, 0xac2, 0x8, 0x0, 0x400}) pipe(&(0x7f0000000d80)={0xffffffffffffffff}) ioctl$TIOCLINUX5(r11, 0x541c, &(0x7f0000000dc0)={0x5, 0x80000001, 0x5, 0x4, 0x8000}) lsetxattr$security_capability(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='security.capability\x00', &(0x7f0000000e80)=@v2={0x2000000, [{0x9, 0x800}, {0x731, 0x4}]}, 0x14, 0x3) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x10, 0x3, 0x1, &(0x7f0000000f80)={0xffffffffffffffff}) fcntl$dupfd(r12, 0x0, r13) 12:19:30 executing program 2: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffd, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x9}}, 0x18) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x60ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) r5 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1000, &(0x7f0000000640)=0x0) r7 = request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='./cgroup.cpu\x00', 0xfffffffffffffffd) keyctl$set_timeout(0xf, r7, 0x6) io_submit(r6, 0x1, &(0x7f0000001b80)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x4, 0x0, 0x2, r3}]) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r3, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, r8, r8, 0xee01]) socket(0x0, 0x2, 0xe3) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="7808196ba174dbd6d55808b6f5158e405345204c696e75911200002a06c46f0006000000070000003c9f0300000000000000c20800000000"], 0x38) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000004c0)={0x10004000200f}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') syzkaller login: [ 61.078857] audit: type=1400 audit(1575202770.756:5): avc: denied { create } for pid=2266 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 61.115160] audit: type=1400 audit(1575202770.796:6): avc: denied { write } for pid=2266 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 61.147280] audit: type=1400 audit(1575202770.826:7): avc: denied { read } for pid=2266 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:19:31 executing program 5: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x101800, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f00000004c0)) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f0000000380)=""/87, &(0x7f0000000300)=0x57) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 61.340842] SELinux: policydb magic number 0x6b190878 does not match expected magic number 0xf97cff8c [ 61.469756] audit: type=1400 audit(1575202771.156:8): avc: denied { create } for pid=2292 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 61.481255] binder: 2293:2297 ioctl c018620c 20000700 returned -1 [ 61.524153] audit: type=1400 audit(1575202771.206:9): avc: denied { create } for pid=2292 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 61.560571] binder: 2293:2297 ioctl c018620c 20000700 returned -1 12:19:31 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0)=0x3, 0x4) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x15acc76c) r3 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x40000008}) creat(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x5}, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000340)=@buf={0x1, &(0x7f00000001c0)="c0"}) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x7, 0x40, 0xffffffffffff0001, 0x9, 0x0, 0x6, 0x8}, &(0x7f0000000300)={0x4, 0x6, 0x20, 0x9, 0x0, 0x7, 0x4, 0x9}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000500)={0x0, 0x391}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000440)) waitid(0x3, r4, &(0x7f00000006c0), 0x40000000, &(0x7f0000000640)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xe) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000005c0)="dbcbddd517902004d7272004216eec6deb2fb06d5c2fb50c104bd96a9a2739e1885f2f97299493e9886699b2590872446fa662cd48e781d80569e600e7ddfc7d217b73f7d4128d5802379d46145d0ce789305041857a") socket$inet6_tcp(0xa, 0x1, 0x0) 12:19:31 executing program 0: r0 = socket(0x10, 0x3, 0xc) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80d00) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x4) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000100020423dcffdf00", 0xffffffffffffff60) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000100)={0x3, 0x7, {0xf2, 0x1, 0x6, {0x9, 0x8000}, {0x1ff, 0x3}, @cond=[{0x7, 0x6, 0x8, 0x81, 0x9, 0x5}, {0x3, 0x1000, 0x7, 0xcd, 0x6, 0x7f}]}, {0x53, 0xb9d, 0xe0, {0x3, 0x2}, {0x5, 0x7}, @cond=[{0x1000, 0x1, 0x9, 0x2, 0x2, 0xfff9}, {0x6, 0x6, 0xcc, 0x3, 0x1, 0x9}]}}) [ 61.704165] audit: type=1400 audit(1575202771.386:10): avc: denied { create } for pid=2326 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:19:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x20141042, 0x0) r2 = inotify_init1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffffffffffeb0) epoll_pwait(r4, &(0x7f0000000300)=[{}, {}], 0x2, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[], 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendfile(r3, r2, 0x0, 0x8000000003) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00\xf8\b\xbe\xdeRB\x10d\x9b5\xe0\xa42NTr\x9e\xb6\x97\xd1\x0f\x04\xf7N]\xa2\x02B35\xbb\xedv\x8f\xad\xa6# \x11\x9chB\xd7\xefu_S\x81\xf6s') remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xdff, 0x10000) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000940)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) fcntl$setlease(r4, 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x14) fcntl$getownex(r5, 0x10, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x100) write$binfmt_aout(r1, &(0x7f0000001a40)=ANY=[@ANYBLOB="08010007a30000007d000000ffffff7f3e0100000500000000000000000000008394efd2b7dde50bbc9c50fdba8d3e8638db0d5dba23ffa019ae7bfe708144de9ff74e3ebef59c629bfc83e6f9ee66fa000000000000000000000100000000f62df1cab2f943d25567178df32226170000f7ccfa6851b9da767cfb6580493834530000000000000000000000000000000000000000000000000000000000000000b5ee54de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000080000000000000000000000000000000000000000000033e60000000000000000000000000000000000000000000000000000000000000000800000d169409d086ba3a54c1c7ff0903bab0765211205983d3919921d313502d5327f555ffb970d2ed7654d10447e9778a4b2ad9503a58abfed85a3d61998e5571bd0c9bbfd559b27f659a41f988b8b9129a1902042f200b6b6c5d0d3bd4e5e975320ea1f464c69841dc997b6ba5d59095191cb36cba0fe6a89728892a42a62f91657f7c8e9176a882bc170"], 0x1aa) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendfile(r6, r7, 0x0, 0x203f) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f00000001c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$BLKGETSIZE(r4, 0x1260, 0x0) sendfile(r7, r7, &(0x7f00000000c0), 0xbf99) [ 61.850725] audit: type=1400 audit(1575202771.536:11): avc: denied { ioctl } for pid=2326 comm="syz-executor.0" path="socket:[8397]" dev="sockfs" ino=8397 ioctlcmd=5568 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 12:19:31 executing program 1: syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x13f1b0a2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socket$inet6(0xa, 0x2, 0x0) socket(0xb0e688d64f88d05f, 0x0, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfffffffffffffffd}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}}, 0x342) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020000000a000000000000000000000005001100000000000a004e2400000009ff020000000c000000000000000000010000000000000000030000000000000002000000e00000010000000000000000d8a15a57b6654702384f29f2f5b689f2423d59bd1780d87f679c42897f701e84e0bc95d154a88da5bd337dbf27c2b1c70235460ed95f8151e99568f23b5c8fc4d8e88ce861893e12d90e18aff407d58cdf46c67f695b049446029b1624bf875ca55cfdc5aa0b3896ac917b55ad00"/214], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x1}]}, 0xffffffffffffff15) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x2) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @ipv4={[], [], @broadcast}, 0x81}, 0x1c) socket(0x1b, 0xb, 0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 61.896684] audit: type=1400 audit(1575202771.576:12): avc: denied { write } for pid=2326 comm="syz-executor.0" path="socket:[8397]" dev="sockfs" ino=8397 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 61.986440] mmap: syz-executor.3 (2350) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 12:19:31 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000100)={0x6, 'veth0_to_hsr\x00', {0x1d}, 0x9}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x80000000000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, &(0x7f0000000280)) 12:19:31 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) socket(0x2, 0x6, 0x1f) r1 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) socket$inet(0x2, 0x800, 0x7f) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e1b, 0x0, @loopback, 0x10000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1dd9fe557e401a9a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000180)={0x0, 0x4, 0x100}, 0xc) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x18}}, 0x1c) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=""/213, &(0x7f0000000040)=0xd5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:19:32 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000040)={@empty, @loopback}, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x5, 0x101}) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f000000a000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = gettid() tkill(r2, 0x14) r3 = getpgid(r2) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r3}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) write$FUSE_OPEN(r5, &(0x7f0000001440)={0x20}, 0x20) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000140)=""/41) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x8000, 0x0) write$P9_RFLUSH(r6, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) 12:19:32 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) write(r2, &(0x7f00000001c0), 0x0) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/119, 0x77, 0x398, 0x8, 0x0, 0x1658971f, 0x4}, 0x11c) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0xc2) lseek(0xffffffffffffffff, 0x3908, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x7, 0x5840, 0x7, 0x9}, 0x14) 12:19:32 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="faff73e4f1b63b2f36b86f390000", @ANYRES16=0x0, @ANYBLOB="e6785ab800000000000008000000f5e95964cd84f3f33ccb0096502d9ecec8fa7b3b56156fa545505eacae7eee3622d16d687b90e3534f1824d906578490d51003a4df996026b3e3ebba5e375060b6fbeef18fc324d07179c060f78347c66d5c3f550830a924a670146d24072c807d2e6601e6"], 0x3}, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(0xffffffffffffffff) r0 = creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000040)='./file0\x00', 0x400) stat(&(0x7f00000009c0)='./file2\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@remote, @in6=@ipv4={[], [], @broadcast}, 0x4e24, 0x8, 0x4e21, 0x8000, 0xa, 0x20, 0x20, 0x6c, 0x0, r3}, {0x0, 0x80000000, 0x0, 0x7, 0x6, 0x4, 0xfffffffeffffffff, 0x9}, {0x8, 0x7ff, 0xfffffffffffffffd, 0x58}, 0x8000, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d2, 0xff}, 0xa, @in=@local, 0x3507, 0x4, 0x0, 0x0, 0x80000001, 0x5, 0x3}}, 0xe8) write(r2, &(0x7f00000001c0), 0xfffffef3) umount2(&(0x7f0000000500)='./file2\x00', 0x6) read(r1, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) dup(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000700)=""/30, 0x1e}], 0x3, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f00000008c0)={0x8000, 0x2, 0x1, 0xfffff800}) signalfd(0xffffffffffffffff, &(0x7f0000000540)={0xffff}, 0x8) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000680)) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000003c0)={'nat\x00'}, &(0x7f0000000440)=0x50) 12:19:32 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x40000000000025d, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) accept4$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14, 0x800) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={@ipv4={[], [], @rand_addr=0x4d402332}, @remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100000001, 0x8bfd, 0xd0, 0x400, 0x7, 0x40, r5}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@loopback, 0x54, r5}) 12:19:32 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@rand_addr="c718876dfa381d8c7a3dfc9883647e41", @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, 0x1000, 0x100, 0x100, 0x1, 0x200000}) syslog(0x3, &(0x7f0000000200)=""/142, 0x8e) r3 = inotify_init() fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x4, 0x378e}, {0x401, 0x3}]}, 0x14, 0x1) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r6 = dup2(r4, r5) openat$cgroup_subtree(r6, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) 12:19:32 executing program 3: r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) timer_create(0x4, &(0x7f0000000400)={0x0, 0x20, 0x0, @thr={&(0x7f0000000340)="96fcdbd2a1d95cb3fbb73db0a9cc41", &(0x7f0000000380)="be3176118f7d8894daf20486cda26e51486a693e7e04edd030374dd4df7640a0ef5b60a74064fa0ebc78f2721973f233ae6d59de41"}}, &(0x7f0000000440)) memfd_create(0x0, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="a5105cdcf3490812aad3d7a2422ebf0eefd2b449307a41af6c997d435cd4c171f25c4defbded67154f1ecd821472b71ed1038c3a000000fd237a0eb5fadf992013953c9539da759a0000000000f029f8ddd3a1c8fe360533"], 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() wait4(r4, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = dup(r8) write$FUSE_OPEN(r9, &(0x7f0000001440)={0x20}, 0x20) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000140)=""/41) ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000000600)=""/104) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x80) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) unlinkat(r7, &(0x7f0000000240)='./file0\x00', 0x200) 12:19:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'vc\x02\v\xae\xd1\xdf\xf6Do\xc0\xa9\x00\x05\x04\x03', 0x200}) [ 63.325693] audit: type=1400 audit(1575202773.006:13): avc: denied { attach_queue } for pid=2428 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1 12:19:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010400000000000000000a00000008000000040002006131081a6ad48499a4481ea3af020000005f49ed3c6cf96feff76ccd3d1e5d30df17e938bc83bfa6aa70ee347c59c6ba02866df9fae93cc3446f377337be2cb7a5eb791b9dd9a140765c053d158762a179b096fff11c3025f8e48773f9da8ff85b12d31dc122d3020c133e5b688e3d1b7370738d65777eb53f4e7766b225ee3e4b686016f23b15c4e3084c409c67d387ff78645107446719347d40a7504dbedaf9553ee42e7ac57bc3254b028613d4bed133"], 0x1c}}, 0x0) 12:19:33 executing program 4: unshare(0x20000000) clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) gettid() ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) wait4(0x0, 0x0, 0x40000000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="b522d3b0f6f692a778f1468b53a0fe29af7fedc4387b87afc449f387ac107111689263c5b9c1a97f7e8c96ed7b5e7393448aacdac116965a6348b84f3e282598867cd7957c8111a69cc956f6fa4372946f37eee186d6f9f0d6a7af", 0x5b, r1) keyctl$assume_authority(0x10, r2) 12:19:33 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) 12:19:33 executing program 3: eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000140)=0x805, 0x1f7) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="f51f3ecb951a014e0c27c1f8f2a2bd5b8bf0bff87f55f5e07b697756407bceb0e636cccb6bad426c744f6534c5a624808173091cefb9ea4c4361c91c74737139dd1e514be24f62412c1f32a056581f966c2e", 0x1f133ac}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0x204) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000400)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f00000005c0)=0xff, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_s\x84ats\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x418}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f00000001c0)) sendfile(r4, r7, 0x0, 0x8000fffffffe) 12:19:33 executing program 4: socket$inet6(0xa, 0x1, 0x0) creat(&(0x7f0000000840)='./file1\x00', 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) setns(r0, 0x2040000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000800)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x68, 0x2}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b00000004000000000000000012000002100000000000000100"/41], 0x2b) r5 = open(&(0x7f0000000480)='./bus\x00', 0x141046, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00E8\xddV\x82li\x1d/y6\xa2\xea\xff7\xcaz\xb1\x04\xa5\x14[\x1d+5B\\q.\x11\x91Y\xe0\xcb\xc5.$\x13h\xac\x89\xca\x86\x11\x03\x1c\x9d\x06KB\x05,\x84>\x84i\x10\x96\xf1BC\xb31\x7f\x96\x7f\x82\"2\x00\x00\x00\x00\x00') socket(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x101}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000940)) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="2f855dacf7334081c5588d188c428881fe49fcc77a873333ef36b4ab5c7faf8f9259ea1e004f26cf80b98e17d0bddc2b7e3a", @ANYRES16, @ANYBLOB="10002cbd7000fcdbdf2515000000440009080800020000000000080001000000000008000200e55d0000080002009104000008000200a800000008000100f7ffffff08000200980e000008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef385"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000500)=0xfffd) stat(0x0, &(0x7f0000000680)) r7 = socket(0x2, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f0000000100)) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1a27, 0x0, 0x0, 0x4}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TIOCGSID(r8, 0x5429, 0x0) 12:19:35 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x3) ftruncate(r0, 0x2081fc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1\x01\x00\x00\x80\x00\x00\x00\x00k(\x00', 0x4fff}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffff7) 12:19:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) accept4$inet6(r1, 0x0, &(0x7f0000000300), 0x80000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) sendfile(r6, r7, &(0x7f00000000c0)=0xffffffff, 0xffff0000) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000340)={0x0, 0x0}, 0x8) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x0, 0x40, @local, 0x80000000}, {0xa, 0x80, 0x0, @dev}, 0x0, [0x1841, 0x4, 0x41000009, 0x1, 0x0, 0x0, 0x8001]}, 0x93) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x4f0d759c0c865eb2) ioctl$KDDISABIO(r8, 0x4b37) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r10 = creat(&(0x7f0000000180)='./file0\x00', 0x0) delete_module(0x0, 0x0) syncfs(r1) r11 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) r12 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) signalfd4(r12, &(0x7f0000000640), 0x8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000640), 0x8, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f00000004c0)={0x0, 0xfffffffffffffddd, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRES64=r12, @ANYRES32, @ANYBLOB="53244628268227a2e26c39a7aadfa72d46016d89740f5abe613343bb01cead73611baf9bae854b4d30686c8fe323e1008a2b39b10da8f5dfefda011b28e030f3455e5e9eaaf404476cce422910decf3ed8411dc86d14e85ed0a1efa9b73ae0f3e9a8cc301cf1246875b232bfc53c58c811742915181bbf60e8fea8301d833cf635abbfea806dcba3"], 0x3}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000001) ftruncate(r11, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000100)={0x0, r10}) 12:19:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xfffffffffffffe9b, 0x6d, 0xfffe}, 0xffffffffffffff64) fcntl$getflags(0xffffffffffffffff, 0x401) fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r5, 0x80046601, 0x0) read(r5, &(0x7f0000000580)=""/250, 0xfa) write$cgroup_int(r5, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) lseek(r5, 0x0, 0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000001c0)={{0x3c, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x4, 'wlc\x00', 0x2, 0x6, 0x7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0x5, 0x6, 0x7ff}}, 0x44) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) r6 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x4, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/345], &(0x7f0000000040)=0x1) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c4cdc81b277839af8eb3926297d81c8b7f586c95c7a210000a2"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) 12:19:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e24, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0xffffffffffffff75) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff80000001) timer_create(0x5, 0x0, &(0x7f0000000400)=0x0) timer_gettime(r7, &(0x7f00000003c0)) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000340)=0x3) lseek(r2, 0x0, 0x2) sendfile(r2, r6, &(0x7f0000000040), 0x8000fffffffe) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r10, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x0) socket$inet6(0xa, 0x80004, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) 12:19:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000680)=""/136, 0x88) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) read(r3, &(0x7f0000000580)=""/238, 0xee) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x22000, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) socket$inet6(0xa, 0x7, 0xfffffffffffffffe) r6 = open(&(0x7f0000002000)='./bus\x00', 0x351042, 0x0) ftruncate(r6, 0x2007fff) setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000000100), 0x4) fchdir(r5) creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) r9 = socket(0x2, 0x0, 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @remote}}) ioctl$TIOCLINUX4(r8, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x8001, @initdev, 0x6}, {0xa, 0x4e23, 0x400000, @mcast1, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x5, 0x40, 0xffffffff, 0x6, 0x1b]}, 0x5c) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r8, 0x40046602, &(0x7f0000000140)=0x8) r10 = open(&(0x7f00000004c0)='./bus\x00', 0x141082, 0x0) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r11, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11}) 12:19:35 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000fd01000800000007000000402c110000000000000000000000000000000100f300000000000000000000004000000000000000098505bd"], 0x4c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x30304, 0x20) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {0x6, 0x1, 0x1, 0x20}, 0x13, [0x6b, 0x200, 0x8, 0x6, 0x1, 0x20, 0xffffff6b, 0x100, 0x100, 0x2, 0x1, 0x8000, 0x836, 0x20, 0x1, 0x3, 0xffffff7f, 0x0, 0x4, 0x2, 0x6, 0x401, 0xe19, 0x40, 0x80000000, 0x7a, 0x401, 0x1f, 0xffffffff, 0x69, 0x1, 0x80000000, 0x1000, 0x800, 0x10001, 0x5, 0x80000000, 0x80, 0x8, 0x6, 0x5, 0x7, 0x1f, 0x0, 0xffff925e, 0x20, 0xfffffffd, 0x5, 0x5, 0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7f, 0x3, 0x3, 0x0, 0xeb, 0x400, 0xcf7, 0x40], [0x80000000, 0xfffffff8, 0x0, 0x1af30a7, 0x1, 0xa3, 0x7, 0x8, 0x7f, 0x32, 0x7fff, 0x17, 0x2, 0xeb, 0x3f8, 0x1, 0x7fff, 0x80000001, 0x3, 0xfffffffb, 0x5, 0x5, 0x7, 0x9, 0x3f228f3a, 0x10001, 0x7ff, 0x7, 0x2, 0x5, 0xe2, 0xfbd, 0x5, 0x3, 0x4, 0x1, 0x83, 0xcb, 0xffffffff, 0x0, 0x8, 0x7f, 0x200, 0x2, 0x3f, 0x99, 0x67, 0x7, 0x5, 0x0, 0x20, 0x6f7, 0x5, 0x938, 0x80000000, 0x3c1, 0xb1d8, 0x200, 0x7, 0x5, 0x6, 0xa4b, 0x1, 0x542f], [0xa7, 0x3, 0xa2b2, 0x800, 0x9, 0x0, 0xd3e, 0x6, 0x0, 0x73eba6d8, 0x7, 0x44654006, 0x140000, 0x8001, 0x2df, 0x200, 0x7, 0x3, 0x400, 0x2, 0x7, 0xc, 0x7fffffff, 0x2, 0x1, 0x80000000, 0x1000, 0x6, 0x2, 0x7f, 0x1000, 0x10001, 0x1, 0x3, 0x3, 0xffffff01, 0x9, 0xcf96, 0x2, 0x8bd, 0x2, 0x6, 0xe0b, 0xfffffffc, 0xfffff800, 0x2, 0x1, 0x1f, 0x401, 0xfffe000, 0x1, 0x7, 0xfffffffb, 0x7fff, 0x7, 0x7, 0x9, 0x3, 0x4, 0x1000, 0xff, 0x40, 0xe7c4, 0x93], [0x3, 0x6, 0x3, 0x1, 0x1, 0x5666c334, 0xeb, 0xff, 0x2, 0x97455fe, 0x3, 0x3ff, 0x430, 0xa9, 0x100, 0x800, 0x2, 0x4, 0x5, 0x8cc, 0x7742, 0x401, 0x1, 0xfffffffd, 0x241, 0x4, 0x0, 0xfffffff8, 0x3, 0x100, 0x1ff, 0x8, 0x4, 0x1000, 0x2, 0x52c3, 0x3, 0x8, 0x2, 0xffffffff, 0x2, 0x9, 0x20, 0x1000, 0x4, 0x7, 0x400, 0x7, 0x3, 0x8000, 0x9d, 0x1, 0x10000, 0xbd07, 0x2, 0x59000, 0x1, 0x2c, 0xfff, 0x4, 0xfffffff9, 0x8, 0x40, 0xfffffff9]}, 0x45c) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) 12:19:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_OPEN(r2, &(0x7f0000001440)={0x20}, 0x20) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000140)=""/41) ioctl$KIOCSOUND(r2, 0x4b2f, 0x80000001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffed, 0x0, 0x0, 0xfffffde1) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fcntl$getown(r3, 0x9) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) read(r4, &(0x7f0000000000)=""/53, 0x35) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x5, 0x1e4001) socket$netlink(0x10, 0x3, 0x0) 12:19:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000680)=""/136, 0x88) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) read(r3, &(0x7f0000000580)=""/238, 0xee) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x22000, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) socket$inet6(0xa, 0x7, 0xfffffffffffffffe) r6 = open(&(0x7f0000002000)='./bus\x00', 0x351042, 0x0) ftruncate(r6, 0x2007fff) setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000000100), 0x4) fchdir(r5) creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) r9 = socket(0x2, 0x0, 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @remote}}) ioctl$TIOCLINUX4(r8, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x8001, @initdev, 0x6}, {0xa, 0x4e23, 0x400000, @mcast1, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x5, 0x40, 0xffffffff, 0x6, 0x1b]}, 0x5c) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r8, 0x40046602, &(0x7f0000000140)=0x8) r10 = open(&(0x7f00000004c0)='./bus\x00', 0x141082, 0x0) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r11, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11}) 12:19:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}, &(0x7f0000001a80)=0x10) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000002c0)={0xfffffffffffffc00}) r6 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000400)={0x6b, 0x75, 0x2, {0x60, "e9667d65872e5c70319e077bf6969437a260fe155c0229fc60c36767a84e7fa2e63352556570470d912726cb6f26cccc07133f5076afb74d55da442c23a2bbe6c040c846158e8ff50a608a183aa5cb09e0d6c51f79d1020900c00cb7ba2b1749"}}, 0x6b) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x100000000000000a, 0x41}) syz_emit_ethernet(0xf7, &(0x7f0000000780)=ANY=[@ANYBLOB="42be4ee4bbc2aaaaaaaaaaaa8848607b02ca00c1003ffe800000000000000000000000000013000000000000000000000000000000014e244e2004019078a40000a5059a2e2184d913e12c046cb01ae95a10b3a53afc560f5881f9f6ce7f75c6a1d5299d3d7c430bf1fb7c270d2771e42d3d24bbd58b92dd13ed7cc256361606735e3e6c5c4646e40de9ab06d214ced55a0fcb320020cf1c3644dc3f9578ca9fce48b0b47eb230a55173323aa9d3701b0d428b2c98a49946189eba44d0c1c22b90d465c0e79ed376ea80169b1bc1be6790805891376606a54560ba72cc6597555e999b15e008e5206c1440e5e3a76d53196b1b451a540d"], 0x0) fsync(r6) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000380)=0xc) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000480)) getpgid(0x0) fcntl$getown(r1, 0x9) lstat(&(0x7f0000001940)='./file1\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r7, 0x0) get_robust_list(0x0, &(0x7f00000006c0)=&(0x7f0000000680)={&(0x7f00000005c0), 0x0, &(0x7f0000000640)={&(0x7f0000000600)}}, &(0x7f0000000740)=0xc) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000008c0)=""/195) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendfile(r5, r4, &(0x7f00000001c0), 0x8) write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0xc}, {0x6}]}, 0x10) write(r0, &(0x7f00000001c0), 0x0) 12:19:35 executing program 1: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f0000000140)={0x67446698, 0x0, 0x0, 0x0, 0x3, "209f52afe9e4cfd07b5cf8cd9762139bcddff5f587b6fb484996f6422d573e425b4c86052d14f331c3f0a4876f8551712fe7d41993e1fd2543a3b8d52a858e4d627caf3a87a5e1b50d3be5d855cd04a27a34762d68a708d920303218ef1a4922d54c097002137e225e"}, 0x79) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x78) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) read(r5, &(0x7f00000004c0)=""/182, 0xb6) syz_genetlink_get_family_id$tipc2(0x0) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x103000, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r8, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) sendfile(r8, r1, &(0x7f0000000740)=0x8001, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x20000, 0x100) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000300)={0xfc, 0x800, 0x3}) 12:19:35 executing program 4: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x1a8) fcntl$setstatus(r3, 0x4, 0x6100) r4 = dup(0xffffffffffffffff) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x108}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffffa1}, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) fcntl$setsig(r2, 0xa, 0x25) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/context\x00', 0x2, 0x0) lseek(r3, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="462183826eede36fe0db56a1129b0502e96712f7fc73f8505db23015b3d040ee36abb9beea04e61c06850d449110f7972c09968789c9f5cd9f9061e4aafdc94df81dbc7734b4bd3e0dea5c8985b44f74af0ec1f42ad55cb83f0ad41a8108e1f22c30da1bdf10e02c3aaded2b78354b1604fc481aeaa55b464ab45203905b6fe06e6df74ee2ace7b7d583c639b7d54a199a32ff4b81813ab6ea1b4d3e4c040f9738a83934cb0b342aa616795e709cb69d6c29"], 0x14}}, 0x0) fremovexattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="99000000009f0c35bc5ac3edd6f2005563b198a8dd350724219f65"]) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000300)={0x7f, 0x46, 0x1}) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) 12:19:36 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r3) write$P9_RSTATu(r3, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0xa, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0xbd4e4c7cd3fc1d17, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) r5 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) recvfrom$inet6(r6, &(0x7f0000000580)=""/239, 0xc8, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1d}, 0x7}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x6, @dev, 0x5}, 0x1c) r8 = dup2(r7, r7) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) ioctl$int_in(r2, 0x0, &(0x7f00000001c0)) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 12:19:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xfffffffffffffe9b, 0x6d, 0xfffe}, 0xffffffffffffff64) fcntl$getflags(0xffffffffffffffff, 0x401) fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r5, 0x80046601, 0x0) read(r5, &(0x7f0000000580)=""/250, 0xfa) write$cgroup_int(r5, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) lseek(r5, 0x0, 0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000001c0)={{0x3c, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x4, 'wlc\x00', 0x2, 0x6, 0x7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0x5, 0x6, 0x7ff}}, 0x44) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) r6 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x4, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/345], &(0x7f0000000040)=0x1) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) 12:19:36 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) prctl$PR_GET_DUMPABLE(0x3) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) fcntl$getown(0xffffffffffffffff, 0x9) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000a00)=ANY=[], 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) write$P9_RLERROR(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="160000000702000d402e2f6367726f75702e63707500e1609cf5b8c3731baa2287faa811f75c9bff220d61ae96836aabc4eebbf780407a6d49665f0dbcc776e45941d5570866ed378e125e13ec802a2ed5272f586446e2898d9cb3b562793b10077b9872bdba7ce23e323ea6eb649a1a59c3d0722f61069538db9256c81ac1b358b1d699aafd671a9e7e916fef20b91c8af79eda49f0911cc15233b739e28d48"], 0x16) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r6, 0x407, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) splice(r6, 0x0, r7, 0x0, 0x30005, 0x0) epoll_wait(r6, &(0x7f00000003c0), 0x0, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0x8c) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) syz_open_dev$evdev(&(0x7f0000000400)='/devinput/even\xf5\x9e\x00', 0x401, 0xa02) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r8, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) getsockname(r9, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000540)=0x80) r10 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/attr/current\x00', 0x2, 0x0) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r11, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) sendfile(r10, r11, &(0x7f0000000180), 0x58cb) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) 12:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000680)=@generic={0x0, 0x2}) creat(&(0x7f0000000000)='./bus\x00', 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r2) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x233c35967a44efcc, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) write(r7, &(0x7f00000000c0)="260000002200476baacdddf260d85f660005006d20002b00000031c96aee719251b3e4d427c9", 0x26) recvmmsg(r7, &(0x7f0000000780), 0x26b99c3d088ebb1, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@ipv4={[], [], @remote}, 0xc8, r6}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x11, 0x1, 0xffffffffffffffff}) fstat(r8, &(0x7f0000000500)) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000380)="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", 0x1a1) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000380)="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", 0x1a1) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r11, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fstat(r11, &(0x7f0000000580)) 12:19:36 executing program 4: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffffffffffe94) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'gretap0\x00', {0x2, 0x4e23, @multicast1}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004504, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) wait4(r6, 0x0, 0x2, 0x0) gettid() getpgid(0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = getpid() wait4(r7, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='\x04\x14u=\x84C\xdf\x80s', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x3, 0x4) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0x13f1b0a2) fchdir(r11) unlinkat(r10, &(0x7f0000000240)='./file0\x00', 0x200) 12:19:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) open(&(0x7f0000000000)='./file0\x00', 0x80040, 0x20) 12:19:36 executing program 1: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x10, 0x277ffeffd}, 0xfffffffffffffd75) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) read(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000003c0)='./file0\x00', 0x104) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64c81152f1671f1e23"], &(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000140)='vfat\x00', 0x19224745cde0c47a, &(0x7f0000000200)=']\x00') getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000400)={'nat\x00'}, &(0x7f0000000180)=0x7b) r2 = creat(&(0x7f0000000500)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r2, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r2, r4, 0x0, 0xfffffffffffffffc) memfd_create(0x0, 0x0) 12:19:36 executing program 0: r0 = socket$packet(0x11, 0x8000000000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) chroot(&(0x7f0000000080)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x4000000000001004}]}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x2) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345064c696e757812000000064c2cf05455216e4445bc349a2ce418c46f0006000000070000003c9f03000000000000"], 0x38) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x8) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) [ 67.279577] syz-executor.0 (2549) used greatest stack depth: 23504 bytes left 12:19:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0xfffffffffffffe9b, 0x6d, 0xfffe}, 0xffffffffffffff64) fcntl$getflags(0xffffffffffffffff, 0x401) fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r5, 0x80046601, 0x0) read(r5, &(0x7f0000000580)=""/250, 0xfa) write$cgroup_int(r5, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) lseek(r5, 0x0, 0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000001c0)={{0x3c, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e21, 0x4, 'wlc\x00', 0x2, 0x6, 0x7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0x5, 0x6, 0x7ff}}, 0x44) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) r6 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x4, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/345], &(0x7f0000000040)=0x1) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) [ 67.427949] SELinux: policydb string SELinux does not match my string SE Linux [ 67.555106] SELinux: policydb string SELinux does not match my string SE Linux 12:19:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) r7 = dup(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xefe652ce569f2865}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000b6397cf7912b89ed58bd1bc3fb979aeab7d330cc3ace6e5e179cbde5814f9e1fa6b8764427edb368fa13bc6ef045ab112476377c", @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf250d00000008000500e20f00001800020014000100fe8000000000000000000000000000aa0800060001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r9, 0x4, 0x40400) write$FUSE_WRITE(r9, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r2, 0x4, 0x6100) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r10, &(0x7f0000007e00), 0x40000000000025d, 0x0) fcntl$getflags(r10, 0x40a) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 12:19:37 executing program 4: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getrusage(0xfffffffffffffffe, &(0x7f00000004c0)) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = accept4$unix(r3, 0x0, &(0x7f0000000400)=0xfffffffffffffd87, 0xc00) lseek(r4, 0x0, 0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f00000000c0)={0x80, 0x0, [0x6095, 0x97, 0x8, 0xfff, 0x9], 0x5}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x2000001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000480), 0x0) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000140)=0xf2) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000001c0)={0x2, 0x100000001}) creat(&(0x7f0000000100)='./file0\x00', 0x80) 12:19:37 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f00000004c0)=""/236) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="67446698000000000c00000003000000209fd089b20d139762139bcddff5f587b6fb484996f6422d573e425b4c86172de1fd2543a3b8b62a858e4d627c443a87a5e1b58b3b019ff8bb42e05ccf5b168d6a8900000000000000303218ef1a4922d54c1e70031397225e00001b00000000005f05000000000000434df7a77f293b58d2128cbb2ba11c97f57497e475c461cc9991f96e191b6210a33ddf142413b3e12d50ddde45c2ec1bd7fec7a42bdb"], 0x1) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0x13) syz_genetlink_get_family_id$tipc2(0x0) pipe(0x0) pipe(&(0x7f0000000280)) creat(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGREP(r9, 0x80084503, 0x0) ioctl$EVIOCGABS0(r9, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendfile(r7, r8, &(0x7f0000000040), 0x8000fffffffe) 12:19:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000340)='keyringposix_acl_accesseth1[self#\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) unlink(&(0x7f0000000040)='./file0/../file0\x00') 12:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x10000000, 0x1fffff}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000380)={0x2a5}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xffffffffffffff31) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f00000003c0)='./bus\x00', 0x4) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000480)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e21, @multicast1}, 0x284, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='ip_vti0\x00', 0x5, 0xffff, 0x800}) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f0000000700)='./bus\x00', 0x1f) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140)) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781a0000008ebb0ff3ccc73e9e35c2e41e44edca4c06c46f000600000007000000529f93acc0000000c52468edb1f9eb8f6813b64468b05f304507474544f6a6e3fcd0f4155b147889fe3a2cbcad77b5df027f1ddaa135836f9887cc5aea02a86964e39bdb0dcee7068b62cd59bd7cc838c19e3541d3b223135c57d5ccfe0f3b4396e73b1529389482e0be96a362a4043e9144"], 0xad) r8 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0xff) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000680)={0x1, r10}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(0xffffffffffffffff, &(0x7f00000005c0)) socket(0x10, 0x0, 0xe3) 12:19:38 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x1d9) write(r0, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r0, &(0x7f0000000340)=0x2, 0x8) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000080)={0x1, 0x5, [0xfff, 0x41, 0x0, 0x9, 0x2], 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) r2 = gettid() tkill(r2, 0x14) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/sctp\x00') sendfile(r1, r4, 0x0, 0x10000) [ 68.317300] SELinux: ebitmap: map size 1288367428 does not match my size 64 (high bit was 7324678) 12:19:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getgid() fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 12:19:38 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = gettid() tkill(r2, 0x14) ptrace$cont(0x9, r2, 0x212ac26e, 0x73aa) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1}) r4 = gettid() tkill(r4, 0x14) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000180)={[], 0x7, 0xfff, 0x2, 0xffff, 0x5, r4}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r5, 0x8, &(0x7f0000000080)={0x449, 0x7f}, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0xfdf4, 0x0}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000280)='./file0\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) pwritev(r6, &(0x7f0000001400), 0x31f, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="b4c3d6f0aec74c8b98cae797986b946b", 0x10) 12:19:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2}, 0x1c, 0x0, 0x3c4}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x3, @loopback}, 0x1c, 0x0, 0x360, &(0x7f0000000640), 0x18}}], 0x7ffffffffffff0b, 0x400c0) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14, 0x800) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000005c0)={@ipv4={[], [], @rand_addr=0x4d402332}, @remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100000001, 0x8bfd, 0xd0, 0x400, 0x7, 0x40, r3}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @nfc={0x27, 0x1, 0x26, 0x2}, @can={0x1d, r3}, @l2={0x1f, 0xd5d, {0xc0, 0x81, 0x3, 0x9, 0x0, 0x3}}, 0x40, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000100)='syzkaller0\x00', 0xff, 0x7, 0x2}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast2, r4}, 0x14) 12:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000680)=@generic={0x0, 0x2}) creat(&(0x7f0000000000)='./bus\x00', 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r2) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x233c35967a44efcc, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) write(r7, &(0x7f00000000c0)="260000002200476baacdddf260d85f660005006d20002b00000031c96aee719251b3e4d427c9", 0x26) recvmmsg(r7, &(0x7f0000000780), 0x26b99c3d088ebb1, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@ipv4={[], [], @remote}, 0xc8, r6}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x11, 0x1, 0xffffffffffffffff}) fstat(r8, &(0x7f0000000500)) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000380)="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", 0x1a1) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000380)="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", 0x1a1) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r11, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fstat(r11, &(0x7f0000000580)) 12:19:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x30) stat(0x0, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee0000010000007e0f7c69d55946f194867fdb26b6b70ec609e4f8dfe09c5bcbf5597e9521b49846c31c5f96d7fbf77220ec50482fef91100416e8a3b964c48fe596f16f35ed3d75640a3c41bac506ba86b2c530879e526d4669a497cc5e70ebfe860d"], 0x38) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7a, r5, &(0x7f0000000300)="3afc7d3eac700018a2129303674f2c162bea2e29a4819a2f51e2c39e42728fa584b4e864b6adccb624bc57dbe9a61dc6a4cd56cd7a23fe84e61f5500e5da9d6e932e3744be7c1bcfc94e8ae764f57462", 0x50, 0xffffffffffffff4f, 0x0, 0x2, r2}]) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000540)) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r6, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fcntl$setstatus(r6, 0x4, 0x40000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x100) socketpair(0x4, 0x80000, 0x74, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'v\xa3\x00\x00\x00\x00\x00\x00\x00\xf2\xff\x01\x00', 0x3105}) 12:19:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000680)=@generic={0x0, 0x2}) creat(&(0x7f0000000000)='./bus\x00', 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r2) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x233c35967a44efcc, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) write(r7, &(0x7f00000000c0)="260000002200476baacdddf260d85f660005006d20002b00000031c96aee719251b3e4d427c9", 0x26) recvmmsg(r7, &(0x7f0000000780), 0x26b99c3d088ebb1, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@ipv4={[], [], @remote}, 0xc8, r6}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x11, 0x1, 0xffffffffffffffff}) fstat(r8, &(0x7f0000000500)) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000380)="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", 0x1a1) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000380)="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", 0x1a1) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r11, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fstat(r11, &(0x7f0000000580)) 12:19:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="010028bd7000fcdf250900000015cd0c000300080004003f005aef8b164e0acc7d000030000200140001000000000006000000000000000000000008000900a5bb9f100800050002000000080009001f0000000c00010008000900360000002400020008000800050000000800070000000000040002004e24000004000400000000000800060002000000065b93ff6c1f414498e5b307db9331b66561f50ca9ce1540b15634acf5bf32cc9f66f663b0555e2e150500000000000000f46a3a192c19bfe29eec296b735cbcf67f89bb18a683f3f632486ded368cb6e5799d3fd899ea737d3b8ef4ec3c69d42f6797"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000800)=0x8000, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000600)=""/96, 0xffffffffffffff06}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000005c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000ac0)={'filter\x00', 0x1000, "13ee928f0cfb25abab3bbd587d6e635e9423231a4f0c344a1450a81726f70c49f1e1646842203e0bcd3ec6cf1887140dbbc67cd3309dce63e1eed91a8f77a621bb44d7ba1f007e5ac940cffcac3e5942f6c66ff12d688ce2d3952145f9f9c626885fd86055a0629cb1da3c55807b97815c38eb4eabc1450cb35855bb5025bcdec39cfb4f348f0ad23f74ef3ab8400123a5d5f60d27ad348d6f06bccfaa283d8e2257d12bb2d3660ce99fca4cd4aa68346fe92c5aa7e0fc9fea7acf9eb970ffe55f928a40085abaf40325b1331f981d2b296f4ed5ca7fd3c9524f5fda60edde865e1e1f7177ac8fdb68d6674ed00d1a21993ef1e76a60aaa2e0706d4591e1adaf0c4920427cf01152d9fa3d9cbcf7e05cbb427c5089a21d6663a6768b604ad00497c51b1003d4edc74f73bbf79591545f054e0a56c3bc000ab5ccd77c9237ec20efb87f93319858ae7cefaf8f45fb3acc8b015b7fe22afa4ec16067a393397aeba928e2ef4779f5ba3aa72ce1aac0d9d31fb21f5cf8a582ea994cc3abb89c22b5da722142f578efd8698b8f06be6919cf7fc37f0e61f3457482e8672d47ca26262b035ecc4c2e50a646da977792ba4f2b9269d6e1a81ca8c052db3351ccb0d11eec7dad353e9fc0dc3b4645c4f73706219af8d84e5c68f191effa98d21f6fe04d1abb7f52ebb2228d2e17df4471515c14739c93837cb3ee4aa16f91ed01963ea2c0ecab38510ef77701515b6ccb9ec9e723d6b8e72ec6d15357f10c23781d9561a4d110411e059e72c5f85909f69a9c3affbca9f5979c71feffe39ded55f550609445ba9572cda08338c0841770c2b56e920276eb73139af6fd3fad3b7870884eba1d91677b07d5a68a7eb8e512f6970f0fcc4232fb7bc3090be2bf52d8b70acbb4841a617c36b15028601bdb33ccaadd7b564652dfc4dcd1c743a51e7e648bd413567d9e0fdf4d0eb451e4136ba00d1ded9af48c34d911243b6820917158e0d78b6bc92b820bb85a9a8e31b3cc64312e57d8cc58f784ac7434910195eab416c9bd95480ddd663a3005df3450132192862211c8a6ff20409194eae6896caee07f6b45c84556e2bfd7e96bbb669769caad8bec4652184daee2f1d0ef15dccb84297aae16c142e8bad47909242cbb9549bed0f2a6dbc0f2cff1c224d3b9f6d520fa591e2e20a22778dad466326efa7017ea9e862d24f51d7081f3a50615f91e71c2b8b244f3db856573f13adc6a3258cc4391376e1a0a996d384c000a182fe2fa2ed42bdd4507e942137cc6da55e32d160f19bfdbde1e7c40661d00ddae121fed9996fbea77ea387258c076d3ea1ab83116d66ed65fc8092d0e6e1cf5774de68cb645d08a3b052a934bcb6749ca524b2c0089aac7c1d104f552a65e3ae94fef190ca0781ac2d1e65c15ffc497bfff0383958d3ca4a90022dabc186c0c7b1a3947bd8980dd15d54fc6866c2c627844bbd972e842267062fea312b31cbd88166987b72b392285f2d929e9283695e74de3ec1e2152fc73293379aace11dc449c9ce264795044918de27ffd08a169440b53e99497eca2aad490711949665334043813d7d74abf7e32ec9471d24f11d2b4c2069498709a72baacd9bd64fd5d5488c8b97114a2788d20a80b3331a50a01b3cb1dfaeb7d2174e179e742f71ab3304a348eab55d3544dabbfff7827a1184e70c88e7f9c0ce65e8b842f70976eb14b5aa207ec3467d652679eafb88c2602076ee4f59c83870385b7c8339f2e8bba21815c16e084a40c43f882551eb2c1396db6f9cd9563e6cafa86adb72358a4e215248ad797ec0adbb3884d308f0efd80781c275635587e0c12eee67301ee8dbdd3d1259364ddb16ea87c1b593ea1e4d089ec4897df8ff79219099e4d5e7b29cc7f9c63acaab46960d9da64637f890361ef652e22047542f744b2ce7414e7ee2ad6f2ebd255d95f32f98d93685b8405cceb9dcfe69ec31e9dd8cce0cf8542c265ee9d39eb8043af31dc5b748153c6892a19ead1868a63bb7d387ff099ce57045e01d6d4c67619199ec39c5953bca92a88aea0611f2d3283f8496a1b40f31e2db7116ce28a4632e100c2e3f1f820aa74d9e4a327e69923a382e1ebd4d7fcb8973f31ea6913cac760cc0b6efadcb06608e09d4f976c30a05f822ac039e9721f90704c8da39363904d5eb533f905789a2b8ffdce55a1ae06c36aa4bdb65b9fac0375ce5ea9de9b05e2ba113c82323f6937570f1efd251c0ea47340ad716dff9cdbce1f7905543857aaba630066b34d2212e8cb8320f939e7581260fbb4217cec967f7c28adecac855258cc947854e0404a676f92cc5dba98ffd094f730a61b78418de255258611d7e6a38fb1f5caf7bcd8aab2d189570dd33f225b0fd51f5064a2cdc6b5cc3500daa84d0b1bffeda26fc0496a54c0685d63bbc472540e739c22fd5e8ce7b339f677f1022b36ff8c12432fff6bd4737723b6cd54ba6fbdae5c1e08c961ad5c98fa3b9b30a389f70808a2c398f2fd0764ff48e8d5ae84563cd4ca1a392bd2de43c203f4ad2de9bfb2111437dee1151b232f6f77ace93962699de64c76e99fd642d615dd15d2426d6ee8c5ae0be4b254456122096871da6f2160ca2359d96c35deaac11be86bc3029020c1d6498419469bb71e22a54110b78a0cf105280c565bb7e644c20c9bae2c44307a6d0e9ba47ee2452a916446b3087a436dfd1d399425303b6b06a84caf516f470048cb7a2aec04150969ffad2dff544520895746167e340c763418fcc07354a853c69132f5d7d1aa43d1ecffd98f13d5919a973c55261641bd95b45206bc69f8a2eee9fc5bcd52fd1414c9ce0c0584cfd5a81d9da5c0f4bad2e8a9af2ff01075e54821b33233e7fbb5b8d4af9323c55f0d00c56fc6c37e7d18e6ac7108d812e6fe52c8d98df10b7545fc3e18492ab3d03ecb494bc39f6156106f3990da31821411c0311911856f657a98be00a71a6a278004e0f54dc61e0cc1ef14d76bb71f8769abc1a971d8657e094345a8a5ac75afb13123d628aca92b057dd7d83a163024378002f662f809bea9af67ca510acbf133ef3b6c45821ae828e4a3a1c9e548e37bc50d3c36b9423fe0de4655be1d500b23ce67457f7f245bc0c3cdff13e04c77580955db6610b81b64899414b1e1f0413ed343badfe28356fd9b9e81772e70531ff8092908b3e0ae408e2aac83add8e1392fd03e21e2de2ae3b8a37bc4d7fd41a77f5aef27fccdc8f9f543b9844e417517b20ed6806734c2a302c3efaf81c63420566a192f2e21e138dd5900807b7434e35ddeb08dc6e8836647277417d63df6003e371ebf3ac318236529a84d898ea01cda21de76a980aa01aa3b48f7af220ceb18f7ddfdb1c566f5969e982da88be9a1a2d69487b49a6973b7702f6857bd8ae78f1338f14cdc19a2b166113aa4b31770ad6aa2cca5cf1f9bbe82aa38c0f3919f3fd4eec18ae33df191567d10ea451307d59e79711563035ac94a09584f3e12e16d52808b1b36437e6504deb79ded3e7c8016ab361ef6fdde71244241f6116aaf4d6fe738c227aee862e1518af271dd513d319d4e39ee4cb5e9dbd9fdf2f5d82905a9fb2a25f8e894e265d17a181c1ecaffc6716d5b0844fc12f2032cd9f7943ca9e503ae5212779490019d7ec25757cfb792c0404670df77ed2f60bce9741623cc593a7de0c3fd983015337a9ca5129e1edbdcdeb3f49600cd1458995dfe74e93e8e53125da53563d55acf6cbd0e2f0cb087bea17b2fde4da108a770408e8a3c6a7c63859329e065b1cfb95a1c28fc5530dad6d853a2ed89db414143bdb9c5d7a1c77b283c0b49b75abf29c4a2e87396803422b5df97a52d0568c1343072aebec87e1052d7946d46a072f0b6cefeef4304437b2d35463bc0553e3ff4e7c124bf7f7779a440dd9fac453c764d0ce7455aebbab46a53aa50938b03ab36d2d6eca35e7a68579078cf2bfb3e99f74dfd19a6914b297a4f81b8ab61e279b2c78f75271fda2d8125766dcd9127a4e51c1a36687f63c5e632a90f12321279cbee15764fd8e19b7321f4b06da199b20e94cbad46f40a7a1d5c0ba6b53babd90a77de4c92f90d02d9ac7cee8b438698a7dad21627f7150ebb4620493827c4095032f12f8577c9b7edc25d67bba7a28823e57471e71b1a0a296e168f278c25e7909712283b8d4e99119b6bc652b3848ecbd15ed6a0f87f3d25a8e60cf4f3a2b6d8e6aed38b8d5d31d37a468d3ccb9e966ac01a1451945c06c4ed400724b7d0da477458e57e573c35c7094fe8ed276678e4a8fe32d22921431e735f795e2eef7437409d87842ed97b3e4e909ce1e90914957ce5ddc242d8ec7eba94d398760597e9355fdf86f912d644b193ff1daf4099169f050cf53ecb114c772254dff2d4689af787ca83d7679c870de09172f4839c6c3ccc66b481762fd4626da99a487b96a5036df5b3f0ef35a015449f891a0d26f12795a84c586a7b5de2f178017e47b3729e6f0ebf0cfbc360cebeb4d93ac443cca789c1e718370afd5da1d454eb085f7297fc983e415697eaec6baec03cc0a08335aab147166a2d4d06316c93660c1decc94547142e4c919bcade4ae24fc20e73e716bb83124cfead0358942f44730fd6f84a567ecdf7e299eecda5b8f4712af77071ad16592e148869f7d8c42e69a9369d6ed5d399a5497f29bd16d31d58b4161fb33407b9508e5bd6f3bda14aab3e44082ba4a640522bc31228da740a66bc65e725a3e3ca743f0c8bec53555bef3581d8c3c58b6cb76f512917cf991b692175823ce1b53d8bd1ef325e731d759fba6f42296fc52ee9cdc04d3199a5d8e272e4a21c1387fe196a8522cdef016c93bfee819cbdc82685eba1d44fbf0a28222cd08cd4d78e23d1e1f60addd0e7ebb48f31e21ed99ac8b3ab2bf20e0f76ee9e16f43e45438c49bc73f4f59320ea6c16cb1761823daa551943d9c9f4bdaf1affb3f8bfdf6c3f2a3d07d8bb131771a758124165179c324dca39c10b6b143bd1cd97f54b6a327298d72151af7ef532dedb01c20998ac3b64f33fb0f42f498c49bd347b94740ece53d7caf26635b10975d4309bc4f23ec165ea2409a1632f8940e015ff5f1c7c380346171803194d9244e5ad31bdcda4fb20ff3c495b74da7abbd4d3dd800a96eeadb0d5e3b0a275fe898fa061120ac1108eb8ca2080ce3f5c278935365520ebb29e1a67885420c90fab6fcba84481a30c99d55e1c1821eb9f4106aa5ff48d92fb9438d262c3282fb1de91bd23575657aef6c059efd69b4fc56b8820ccfe48d25b10f8880d999ca858f18543196133f9337c7e5c8838951d3bf79308f2ac0ace9515d07725cb42f53bf6cd715267ce9f793bee9ed59670ed5135ea25b9cb27feb46a57c89663e0bf0044303f2ef1e3a874c830c20ebc5d3e32f37e5f366dbbe0c2a5924145e160c3b09967aafec1dc883c1ae47395d0b11800cb844817b17f75510d64982762369374fc4fb70d49b69a4a30e6df05e6a9d241036fdc1ea26be3fd293588a541343908e4650b714b56de2f94f730fea0c77593563ea5bf1446127a601d13a1133d708a0765ce3d61f9c62c04c9de7ab02f94d37567d5b3cee8656d81d9e1e9096b77478f76878322b919ffb20489fb7a93c24a1b00063f60390b953ac7b08b4d49b9c56425f763f56e0e0145deb8d53e3241813b646ae63674bbf84de7047f56289689cfb781898f6ad3f51b00714b758a4d1e5d239efe263e5cc24b1ce4a8b36657d806c51c07d7a4c1c7681682baa47256ae9f5a257d743470f2303b24b7a1dd47"}, &(0x7f00000001c0)=0x1024) socket$unix(0x1, 0x1, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x18) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)) 12:19:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) r3 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x40800) bind(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x4, 0xfff, {0xa, 0x4e21, 0x45eb, @remote, 0x3}}}, 0x80) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) shutdown(r0, 0x1) 12:19:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x1) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x412200, 0xc425016d062066d1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e24, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r8 = open(&(0x7f0000000000)='./bus\x00', 0x1290c0, 0x306) write$P9_RLERRORu(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000702000b256d5334de8637cd6c616e3005000000cc6cfedc285b16e9a73eedb368c2136dda9c671af509b7ad319f9904b4130e918f9684e220317d3e3ebc58269a71fee53b7f2b64c4ebc00063b81422e256fbc917ae451dd8bd454a0d2575fab058f56ce6efa0cbf53699cab2759645a6d1c61819821e8b982714ba646a3e3efb7883e10b6357e59cf44f9370ab90539909d2e987ea7b8e7a8bc082c618e0a0e55a2431075ee9973452d1eb6887d96ab1530877658526b50443c7b06a1c642e59dd31ca731ce2e194fdc2d9b82399938072e3866cbd233d5ee3e6331c6354088db9a8c6af88e73a9ef0924bd9bb61184921499a4d04e830598da6e04f9a5c4c83e120ac1cad660df50842edf1060dae68d98155ceab031ca142c8d88f7a1676172165672ded633573a43c2baf1a46f6557eed5283a4aa00d2bff0231c564dcb4833e37386b16d68ec718dc45d4cbf193f3e50b042cc87407b05530e374e30da07ab219fc6387da756a118f8539f963958aa7e9891d52d031d1ae4dd89845277b59581c236e620f0f163e45ff3edc10ece2f7d3c9fa197114cda32aec7dd983c59e97017a17c6e973f167af4ba484d529d70b09e8bea27a516dcfeac89eb97b8c400222aaee4f42862b05321c98b663fc54995423bfe646f0dbbf563657197ebcb9827d4a05e6ce93cbde08788021483e88a7f7b765f5b9caab8"], 0x90) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r10, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) sendfile(r10, r9, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r11, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r8, &(0x7f0000000040), 0x8000fffffffe) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r13, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r8, 0x0, 0xa5cc554) 12:19:40 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x20) inotify_add_watch(r0, &(0x7f00000003c0)='./file0/bus\x00', 0x25000510) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x8000, 0x0) inotify_add_watch(r1, &(0x7f0000000380)='./file0/bus\x00', 0x527) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x403, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x401805a) sendfile(r2, r3, 0x0, 0x1000000000e6) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x1, @remote, 0x10001}, 0x1c) 12:19:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x1) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x412200, 0xc425016d062066d1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e24, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r8 = open(&(0x7f0000000000)='./bus\x00', 0x1290c0, 0x306) write$P9_RLERRORu(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000702000b256d5334de8637cd6c616e3005000000cc6cfedc285b16e9a73eedb368c2136dda9c671af509b7ad319f9904b4130e918f9684e220317d3e3ebc58269a71fee53b7f2b64c4ebc00063b81422e256fbc917ae451dd8bd454a0d2575fab058f56ce6efa0cbf53699cab2759645a6d1c61819821e8b982714ba646a3e3efb7883e10b6357e59cf44f9370ab90539909d2e987ea7b8e7a8bc082c618e0a0e55a2431075ee9973452d1eb6887d96ab1530877658526b50443c7b06a1c642e59dd31ca731ce2e194fdc2d9b82399938072e3866cbd233d5ee3e6331c6354088db9a8c6af88e73a9ef0924bd9bb61184921499a4d04e830598da6e04f9a5c4c83e120ac1cad660df50842edf1060dae68d98155ceab031ca142c8d88f7a1676172165672ded633573a43c2baf1a46f6557eed5283a4aa00d2bff0231c564dcb4833e37386b16d68ec718dc45d4cbf193f3e50b042cc87407b05530e374e30da07ab219fc6387da756a118f8539f963958aa7e9891d52d031d1ae4dd89845277b59581c236e620f0f163e45ff3edc10ece2f7d3c9fa197114cda32aec7dd983c59e97017a17c6e973f167af4ba484d529d70b09e8bea27a516dcfeac89eb97b8c400222aaee4f42862b05321c98b663fc54995423bfe646f0dbbf563657197ebcb9827d4a05e6ce93cbde08788021483e88a7f7b765f5b9caab8"], 0x90) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r10, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) sendfile(r10, r9, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r11, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r8, &(0x7f0000000040), 0x8000fffffffe) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r13, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r8, 0x0, 0xa5cc554) [ 71.167614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket [ 71.235252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket 12:19:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x1) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat(0xffffffffffffffff, 0x0, 0x412200, 0xc425016d062066d1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e24, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) getrandom(&(0x7f0000004100)=""/4096, 0x1000, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r8 = open(&(0x7f0000000000)='./bus\x00', 0x1290c0, 0x306) write$P9_RLERRORu(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x90) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r10, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) sendfile(r10, r9, 0x0, 0xffffffff80000001) timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={&(0x7f0000000300)="fe02611ffad8a192251791b2b7de81726636623bc8d8fa0ed11ddd1a585da74365c333cc6466349f583a652d434de9d21a13fd3c4958872565a9db3172fe770d39214696d19558bbc034b464d30e4a75", &(0x7f0000000180)="d6c64abb5861c3827889732ca8bbaa4da7713f4f0524d25de74c10dfa830e624fa422d4bd13728f927f13f63d09af05742"}}, &(0x7f00000003c0)=0x0) timer_gettime(r11, &(0x7f0000000480)) lseek(r2, 0x0, 0x2) sendfile(r2, r8, &(0x7f0000000040), 0x8000fffffffe) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r13, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r8, 0x0, 0xa5cc554) 12:19:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/0\x00yFAtz\x9b\x88\xb3\x04\x04\xd7a7\x1a\x86N\b\xb2h-ex\xb4\x13\x89\xc1\xc6_\xd9\xb3<^\xfe\b\x10\f\xad\xf6\xd6J\th\xeb;!o\xa2\xcf\xc18)\xa29\xca#9\xbc$\xfd\xef~\x12\x81\xd4\xc5~c\b\xb1\xb091\xbe\xe0%k\x83\xeen\xa6R\xab`:{\x97rg\xd3.\x13\x10\xaf]\xc1\xf7\xec\xcdz\xb2\x00W\xd5G\xff\x9c\xa4Z\xac\x85') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000001c0)={0x8, 'bpq0\x00', {'bond0\x00'}, 0x7}) dup3(r1, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) write(r3, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r3, &(0x7f0000000340)=0x2, 0x8) ioctl$BLKGETSIZE64(r3, 0x80041272, &(0x7f0000000200)) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) ioctl$int_out(r4, 0x1, &(0x7f0000000240)) 12:19:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='security.capability\x00', &(0x7f0000000400)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000227f74)=""/125, 0x7d) 12:19:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000680)=@generic={0x0, 0x2}) creat(&(0x7f0000000000)='./bus\x00', 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r2) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x233c35967a44efcc, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) write(r7, &(0x7f00000000c0)="260000002200476baacdddf260d85f660005006d20002b00000031c96aee719251b3e4d427c9", 0x26) recvmmsg(r7, &(0x7f0000000780), 0x26b99c3d088ebb1, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@ipv4={[], [], @remote}, 0xc8, r6}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x11, 0x1, 0xffffffffffffffff}) fstat(r8, &(0x7f0000000500)) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000380)="fc0000001d000700ab092500090007000aab8000000000000000369308000100ec0100000005d0000000000000039835fa2c1ec28639eb9c5f3263cdd20e6dc08c3c94bed13f24ca5fd8f156aaa79bb94b46fe000000bcf1c4ed3800021a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e772c05dcfd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d0700000000000000ba4a463ae4f5566f916a51192ed6724b9b143b5e4cb2ccd243f204000000ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4cc7d31313134103724e76c68dc72ded5aa2af651ac8ac68b19d4b610", 0x1a1) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000380)="fc0000001d000700ab092500090007000aab8000000000000000369308000100ec0100000005d0000000000000039835fa2c1ec28639eb9c5f3263cdd20e6dc08c3c94bed13f24ca5fd8f156aaa79bb94b46fe000000bcf1c4ed3800021a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e772c05dcfd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d0700000000000000ba4a463ae4f5566f916a51192ed6724b9b143b5e4cb2ccd243f204000000ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4cc7d31313134103724e76c68dc72ded5aa2af651ac8ac68b19d4b610", 0x1a1) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r11, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fstat(r11, &(0x7f0000000580)) 12:19:41 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) socket$inet(0x2, 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RSTATFS(r3, &(0x7f0000000340)={0x43, 0x9, 0x1, {0x1f, 0x1000, 0x9ec, 0x7, 0x6, 0x1f, 0x1, 0x401, 0x800}}, 0x43) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x5}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, r6+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x8010, r5, 0x0) 12:19:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0xffffffffffff2aa3}}) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'tunl0\x00', r3}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x4080044) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000440)={0x15ac, 0x1ffe0000000}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x165, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xffffff0f) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r6, 0x0, 0x2) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv\xff\xff') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1100100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020825bd7000fddbdf25280000002000020004000400080200980f5f460800010000000000440005002400020008000300018000000800020000080000080002000300000008000400030000001c00020008000400070000000800040007000000080002006d000000"], 0x78}}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00479dc9e38a347000ea5af90000", @ANYRES16=r8, @ANYBLOB="080826bd7000fcdbdf250b000000180007000c000400060000000000000008000100a90700001800020004000400080002007d1a00000800020038fd00002000060004000200080001000800000008000100ffffffff080001002000000010000600080001000900000004000200"], 0x74}}, 0x98) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000004c0)={0x9, 0x9}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) 12:19:41 executing program 2: r0 = gettid() uname(0x0) socket$unix(0x1, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$eventfd(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\x00', 0x1, 0x0) getsockname$unix(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_submit(0x0, 0xfffffffffffffd67, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 12:19:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x134}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:19:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/146, 0x92}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x7f, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) shutdown(r3, 0x0) 12:19:41 executing program 2: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = socket(0x2, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x8000000000000000}]) 12:19:42 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000001040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 12:19:42 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x0) 12:19:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/146, 0x92}, {0x0}], 0x2}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x7f, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r3, 0xffff, 0x1006, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) shutdown(r3, 0x0) 12:19:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 72.667721] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/2822 [ 72.676372] caller is __this_cpu_preempt_check+0x1d/0x30 [ 72.682052] CPU: 1 PID: 2822 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 72.689166] 0000000000000000 2fe9588ca120ad51 ffff8800baa3f5f8 ffffffff81aad1a1 [ 72.697247] ffff8800ba97af80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 72.705327] 0000000000000001 ffff8800baa3f638 ffffffff81b0ad83 ffff8800b9391680 [ 72.713412] Call Trace: [ 72.716006] [] dump_stack+0xc1/0x120 [ 72.721387] [] check_preemption_disabled+0x1d3/0x200 [ 72.728143] [] __this_cpu_preempt_check+0x1d/0x30 [ 72.734658] [] tcp_try_coalesce+0x245/0x510 [ 72.740632] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 72.747661] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 72.754776] [] tcp_queue_rcv+0x127/0x6f0 [ 72.760492] [] tcp_send_rcvq+0x3de/0x4a0 [ 72.766233] [] ? tcp_rcv_established+0x2070/0x2070 [ 72.772813] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 72.779648] [] ? lock_sock_nested+0x90/0x120 [ 72.785711] [] ? trace_hardirqs_on+0xd/0x10 [ 72.791700] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 72.798029] [] tcp_sendmsg+0x2332/0x2ab0 [ 72.803746] [] ? trace_hardirqs_on+0x10/0x10 [ 72.810854] [] ? sock_has_perm+0x2a8/0x400 [ 72.816741] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 72.824277] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 72.831035] [] ? tcp_sendpage+0x17c0/0x17c0 [ 72.837059] [] ? check_preemption_disabled+0x3c/0x200 [ 72.843911] [] ? check_preemption_disabled+0x3c/0x200 [ 72.850757] [] ? inet_sendmsg+0x143/0x4d0 [ 72.858215] [] inet_sendmsg+0x202/0x4d0 [ 72.864377] [] ? inet_sendmsg+0x76/0x4d0 [ 72.870109] [] ? inet_recvmsg+0x4d0/0x4d0 [ 72.875920] [] sock_sendmsg+0xbe/0x110 [ 72.881470] [] ___sys_sendmsg+0x369/0x890 [ 72.887288] [] ? copy_msghdr_from_user+0x550/0x550 [ 72.893883] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 72.900742] [] ? futex_wake+0x166/0x490 [ 72.906372] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 72.913128] [] ? check_preemption_disabled+0x3c/0x200 [ 72.919961] [] ? check_preemption_disabled+0x3c/0x200 [ 72.926812] [] ? __fget+0x13b/0x370 [ 72.932109] [] ? __fget+0x162/0x370 [ 72.937403] [] ? __fget+0x47/0x370 [ 72.942607] [] ? __fget_light+0xa3/0x1f0 [ 72.948327] [] ? __fdget+0x1b/0x20 [ 72.953529] [] ? sockfd_lookup_light+0xb4/0x160 [ 72.959866] [] __sys_sendmmsg+0x1d6/0x2e0 [ 72.965716] [] ? SyS_sendmsg+0x50/0x50 [ 72.971270] [] ? __might_fault+0x95/0x1d0 [ 72.977085] [] ? SyS_clock_gettime+0x118/0x1e0 [ 72.983338] [] ? SyS_clock_settime+0x220/0x220 [ 72.989603] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 72.995780] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 73.002890] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 73.009757] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 12:19:42 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x43c) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) [ 73.016619] [] compat_SyS_sendmmsg+0x32/0x40 [ 73.022697] [] ? compat_SyS_sendmsg+0x40/0x40 [ 73.028859] [] do_fast_syscall_32+0x32d/0xa90 [ 73.035008] [] sysenter_flags_fixed+0xd/0x1a 12:19:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/146, 0x92}, {0x0}, {0x0}], 0x3}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x7f, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000)={0x10001}, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) shutdown(r3, 0x0) 12:19:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62cd"], 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 12:19:43 executing program 2: getpid() socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x4, 0xfffffffd, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 12:19:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:43 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x0) 12:19:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unlinkat(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x1012b, 0x0, 0x0, 0x800e006a5) shutdown(r0, 0x0) [ 74.053258] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/2851 [ 74.062064] caller is __this_cpu_preempt_check+0x1d/0x30 [ 74.067970] CPU: 0 PID: 2851 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 74.075132] 0000000000000000 f3fa7417e61507ae ffff8801cb4075f8 ffffffff81aad1a1 [ 74.083230] ffff8800b96f2f80 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 74.091346] 0000000000000002 ffff8801cb407638 ffffffff81b0ad83 ffff8801d63da000 [ 74.099403] Call Trace: 12:19:43 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000001c0)) poll(0x0, 0x0, 0xffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) 12:19:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 74.102000] [] dump_stack+0xc1/0x120 [ 74.107371] [] check_preemption_disabled+0x1d3/0x200 [ 74.114128] [] __this_cpu_preempt_check+0x1d/0x30 [ 74.120632] [] tcp_try_coalesce+0x245/0x510 [ 74.126609] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 74.133636] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 74.140745] [] tcp_queue_rcv+0x127/0x6f0 [ 74.146462] [] tcp_send_rcvq+0x3de/0x4a0 [ 74.152205] [] ? tcp_rcv_established+0x2070/0x2070 [ 74.158792] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 74.165633] [] ? lock_sock_nested+0x90/0x120 [ 74.171682] [] ? trace_hardirqs_on+0xd/0x10 [ 74.177639] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 74.183954] [] tcp_sendmsg+0x2332/0x2ab0 [ 74.189660] [] ? trace_hardirqs_on+0x10/0x10 [ 74.195707] [] ? sock_has_perm+0x2a8/0x400 [ 74.201587] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 74.209110] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 74.215858] [] ? tcp_sendpage+0x17c0/0x17c0 [ 74.221813] [] ? check_preemption_disabled+0x3c/0x200 [ 74.228639] [] ? check_preemption_disabled+0x3c/0x200 [ 74.235473] [] ? inet_sendmsg+0x143/0x4d0 [ 74.241722] [] inet_sendmsg+0x202/0x4d0 [ 74.247439] [] ? inet_sendmsg+0x76/0x4d0 [ 74.253182] [] ? inet_recvmsg+0x4d0/0x4d0 [ 74.258979] [] sock_sendmsg+0xbe/0x110 [ 74.264523] [] ___sys_sendmsg+0x369/0x890 [ 74.270760] [] ? copy_msghdr_from_user+0x550/0x550 [ 74.277333] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 74.284353] [] ? futex_wake+0x166/0x490 [ 74.289976] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 74.296727] [] ? check_preemption_disabled+0x3c/0x200 12:19:44 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00') execve(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) write$binfmt_aout(r0, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) [ 74.303582] [] ? check_preemption_disabled+0x3c/0x200 [ 74.310433] [] ? __fget+0x13b/0x370 [ 74.315720] [] ? __fget+0x162/0x370 [ 74.321005] [] ? __fget+0x47/0x370 [ 74.326201] [] ? __fget_light+0xa3/0x1f0 [ 74.331907] [] ? __fdget+0x1b/0x20 [ 74.337093] [] ? sockfd_lookup_light+0xb4/0x160 [ 74.343416] [] __sys_sendmmsg+0x1d6/0x2e0 [ 74.349212] [] ? SyS_sendmsg+0x50/0x50 [ 74.356991] [] ? __might_fault+0x95/0x1d0 [ 74.362783] [] ? SyS_clock_gettime+0x118/0x1e0 [ 74.369094] [] ? SyS_clock_settime+0x220/0x220 [ 74.375314] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 74.381445] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 74.388536] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 74.395366] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 12:19:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 74.402189] [] compat_SyS_sendmmsg+0x32/0x40 [ 74.408675] [] ? compat_SyS_sendmsg+0x40/0x40 [ 74.414808] [] do_fast_syscall_32+0x32d/0xa90 [ 74.420950] [] sysenter_flags_fixed+0xd/0x1a 12:19:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/117, 0x75}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4e5ccf5, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/118, 0x76}, {0x0}], 0x2}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/21, 0xfffffded}], 0x100000000000000c) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 74.473105] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/2885 [ 74.481996] caller is __this_cpu_preempt_check+0x1d/0x30 [ 74.487459] CPU: 1 PID: 2885 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 74.494467] 0000000000000000 fd0e37b2b7bbf877 ffff8801cf4b75f8 ffffffff81aad1a1 [ 74.502544] ffff8801d6118000 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 74.510617] 0000000000000001 ffff8801cf4b7638 ffffffff81b0ad83 ffff8800b8062780 [ 74.518711] Call Trace: 12:19:44 executing program 1: 12:19:44 executing program 1: [ 74.521292] [] dump_stack+0xc1/0x120 [ 74.526640] [] check_preemption_disabled+0x1d3/0x200 [ 74.533385] [] __this_cpu_preempt_check+0x1d/0x30 [ 74.539878] [] tcp_try_coalesce+0x245/0x510 [ 74.545849] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 74.552865] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 74.559967] [] tcp_queue_rcv+0x127/0x6f0 [ 74.565677] [] tcp_send_rcvq+0x3de/0x4a0 12:19:44 executing program 1: [ 74.571386] [] ? tcp_rcv_established+0x2070/0x2070 [ 74.577964] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 74.584805] [] ? lock_sock_nested+0x90/0x120 [ 74.590867] [] ? trace_hardirqs_on+0xd/0x10 [ 74.596848] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 74.603167] [] tcp_sendmsg+0x2332/0x2ab0 [ 74.608962] [] ? trace_hardirqs_on+0x10/0x10 [ 74.615035] [] ? sock_has_perm+0x2a8/0x400 [ 74.620942] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 74.628489] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 74.635225] [] ? tcp_sendpage+0x17c0/0x17c0 [ 74.641180] [] ? check_preemption_disabled+0x3c/0x200 [ 74.648001] [] ? check_preemption_disabled+0x3c/0x200 [ 74.654822] [] ? inet_sendmsg+0x143/0x4d0 [ 74.660608] [] inet_sendmsg+0x202/0x4d0 [ 74.666230] [] ? inet_sendmsg+0x76/0x4d0 [ 74.671939] [] ? inet_recvmsg+0x4d0/0x4d0 [ 74.677729] [] sock_sendmsg+0xbe/0x110 [ 74.683253] [] ___sys_sendmsg+0x369/0x890 [ 74.689036] [] ? copy_msghdr_from_user+0x550/0x550 [ 74.695596] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 74.702338] [] ? check_preemption_disabled+0x3c/0x200 [ 74.709158] [] ? check_preemption_disabled+0x3c/0x200 [ 74.715989] [] ? __fget+0x13b/0x370 [ 74.721267] [] ? __fget+0x162/0x370 [ 74.726522] [] ? __fget+0x47/0x370 [ 74.731694] [] ? __fget_light+0xa3/0x1f0 [ 74.737388] [] ? __fdget+0x1b/0x20 [ 74.742823] [] ? sockfd_lookup_light+0xb4/0x160 [ 74.749136] [] __sys_sendmmsg+0x1d6/0x2e0 [ 74.754935] [] ? SyS_sendmsg+0x50/0x50 [ 74.760474] [] ? __might_fault+0x95/0x1d0 [ 74.766291] [] ? SyS_clock_gettime+0x118/0x1e0 [ 74.772527] [] ? SyS_clock_settime+0x220/0x220 [ 74.778759] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 74.785017] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 74.792212] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 74.799046] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 74.805881] [] compat_SyS_sendmmsg+0x32/0x40 [ 74.811924] [] ? compat_SyS_sendmsg+0x40/0x40 [ 74.818230] [] do_fast_syscall_32+0x32d/0xa90 12:19:44 executing program 1: 12:19:44 executing program 5: 12:19:44 executing program 0: 12:19:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000", 0x1b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) syz_emit_ethernet(0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028000000000000907800"/38, @ANYRES32=0x42424242, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00'], 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 74.824416] [] sysenter_flags_fixed+0xd/0x1a 12:19:44 executing program 5: pipe(0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) inotify_init() rt_sigpending(0x0, 0x0) 12:19:44 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) 12:19:44 executing program 1: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)=""/54, 0x36}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000880)=""/95, 0x5f}, {&(0x7f0000000900)=""/252, 0xfc}, {&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 12:19:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/162, 0xa2}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000001540)=[{}, {}, {r0, 0x84}], 0x3, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x150f, 0x0, 0x0, 0x800e00810) shutdown(r1, 0x0) 12:19:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x54fd1c859fdbc1fd, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x49, @mcast1, 0x80000001}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0x196) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000001c0)={0x7, 0x0, 0xff}, 0xc) 12:19:44 executing program 5: ustat(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) write$FUSE_OPEN(r5, &(0x7f0000001440)={0x20}, 0x20) r6 = add_key$keyring(&(0x7f0000001480)='keyring\x00', &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r6, &(0x7f0000001500)=""/106, 0x6a) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000140)=""/41) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x40051) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='memory.current\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x13) [ 74.998268] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/2927 [ 75.007068] caller is __this_cpu_preempt_check+0x1d/0x30 [ 75.012953] CPU: 1 PID: 2927 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 75.019973] 0000000000000000 58e61f502b9f0ffd ffff8801d5f9f5f8 ffffffff81aad1a1 [ 75.028042] ffff8800b7fdc740 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 75.036120] 0000000000000001 ffff8801d5f9f638 ffffffff81b0ad83 ffff8800b82fe280 [ 75.044181] Call Trace: [ 75.046768] [] dump_stack+0xc1/0x120 [ 75.047502] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 75.058090] [] check_preemption_disabled+0x1d3/0x200 [ 75.064843] [] __this_cpu_preempt_check+0x1d/0x30 [ 75.071345] [] tcp_try_coalesce+0x245/0x510 [ 75.077324] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 75.084348] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 75.091459] [] tcp_queue_rcv+0x127/0x6f0 [ 75.097276] [] tcp_send_rcvq+0x3de/0x4a0 [ 75.103003] [] ? tcp_rcv_established+0x2070/0x2070 [ 75.109583] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 75.116429] [] ? lock_sock_nested+0x90/0x120 [ 75.122487] [] ? trace_hardirqs_on+0xd/0x10 [ 75.128460] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 75.134776] [] tcp_sendmsg+0x2332/0x2ab0 [ 75.140478] [] ? trace_hardirqs_on+0x10/0x10 12:19:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000600)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000280)=0x6e, 0x80000) syz_open_pts(r4, 0x20000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x4000010, r7, 0x3c799000) read(r4, &(0x7f0000000000)=""/250, 0xedf1d44) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r9, &(0x7f00000000c0)={'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x2}, 0x61) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0xa, 0x0, [], [{0x4, 0xffff, 0x81, 0x4, 0x0, 0x1}, {0x4, 0x3, 0x10000, 0xffffffffffff8000, 0x1d82, 0x8001}], [[], [], [], [], [], [], [], [], [], []]}) write$FUSE_WRITE(r8, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)=""/51, 0x33) fsetxattr$trusted_overlay_redirect(r10, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x1) connect$inet(r10, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="2e00000003000000010000000000000003000000000000000d000000000000002e2f6367726f75812e0070750000"], 0x2e) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r1}) [ 75.146965] [] ? sock_has_perm+0x2a8/0x400 [ 75.152853] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 75.160384] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 75.167131] [] ? tcp_sendpage+0x17c0/0x17c0 [ 75.173101] [] ? check_preemption_disabled+0x3c/0x200 [ 75.179961] [] ? check_preemption_disabled+0x3c/0x200 [ 75.186801] [] ? inet_sendmsg+0x143/0x4d0 [ 75.192599] [] inet_sendmsg+0x202/0x4d0 [ 75.198221] [] ? inet_sendmsg+0x76/0x4d0 [ 75.203931] [] ? inet_recvmsg+0x4d0/0x4d0 [ 75.209737] [] sock_sendmsg+0xbe/0x110 [ 75.215287] [] ___sys_sendmsg+0x369/0x890 [ 75.221083] [] ? copy_msghdr_from_user+0x550/0x550 [ 75.227665] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 75.234425] [] ? check_preemption_disabled+0x3c/0x200 [ 75.241264] [] ? check_preemption_disabled+0x3c/0x200 [ 75.248107] [] ? __fget+0x13b/0x370 [ 75.253382] [] ? __fget+0x162/0x370 [ 75.258654] [] ? __fget+0x47/0x370 [ 75.263851] [] ? __fget_light+0xa3/0x1f0 [ 75.269561] [] ? __fdget+0x1b/0x20 [ 75.274752] [] ? sockfd_lookup_light+0xb4/0x160 [ 75.281069] [] __sys_sendmmsg+0x1d6/0x2e0 [ 75.286867] [] ? SyS_sendmsg+0x50/0x50 [ 75.292403] [] ? __might_fault+0x95/0x1d0 12:19:45 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = gettid() tkill(r1, 0x14) prctl$PR_SET_PTRACER(0x59616d61, r1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)="1e566f5e079f805f4ee2db0baa765a323d3d1b6ff20bab68939dfba05f629492699c2e06d8796cca942aa03d3f04ad602aac0bd8422e2415dc97248478464fe3349b1fc5427d42ebf519b6b004f6c911870552289010e816d88767da497705c11284a038422b315a5caf1ca154a02820cd1c603ff991c6a7179c81c5cf46ea7488ba41b2ac66754c418f2c30b38bc6c84309ce53a08e5851f0b6d78dd72aea7a454330c9870f13b658a026cdd8a2f5546b572e64698dcab25605ab7157c14e21fa544a6de027fc34850b48b53758b6d498191a66f7655d14d80f9308aae4aab32454a3c8845d1e", 0xe7) r2 = socket(0x10, 0x80002, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f10101c7033400b0", 0x26) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096}) connect$netlink(r2, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) exit(0x10001) r4 = gettid() clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TCSBRKP(r3, 0x5425, 0x80000000) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000040)) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x8) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000300)=0x4) getpriority(0x1, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000002c0)=0x0) tkill(r7, 0x37) sendto(r2, &(0x7f0000000000), 0x1c, 0x0, 0x0, 0x0) [ 75.298203] [] ? SyS_clock_gettime+0x118/0x1e0 [ 75.304439] [] ? SyS_clock_settime+0x220/0x220 [ 75.310676] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 75.316825] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 75.323932] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 75.331208] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 75.338223] [] compat_SyS_sendmmsg+0x32/0x40 [ 75.344286] [] ? compat_SyS_sendmsg+0x40/0x40 [ 75.350438] [] do_fast_syscall_32+0x32d/0xa90 [ 75.356584] [] sysenter_flags_fixed+0xd/0x1a 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:45 executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x6c8732adf3c0898d) write$binfmt_misc(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797a311644b9e711590eeb2251dc9532be6536e0bf5aa13b8ec26e59211526d508f2f498e98263a13e32316e535fed803c11cb52af0061b9cdb2000000307e2c4814b4c97cdd05b6c37cb1df732ea6706e58295d300474905d48149cce8db380d6c16dad6c8c373d002c41fbed78b35efe672f1416ddc7711f4c3519d0dfb9c21f1a"], 0x61) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="7200000000000000000080101800000000000000000000000000000000000000000000000000000000000000000030efa95d34bfd8000000800090dce66c3e14233aa78ef9a10000000000000000000000000007000000000000000000000000000000000000000000d4d66fd18d67a2b1a30c7d337f1c15fd59179f55f0d76aab810faa5a2f86945cc46a224cc786739e54dd6681ad0841066816601a15edf9440204bd97d03dd0678c24fcc0f328dbeeb72e14"], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x1) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000800)=0x3b) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000780)="bdf89a8e919127db83dacc89dcd32bbb1203f8389589a8e1e5dcff4059cc8a49338c14f490caf1a6cf09c6", 0xb39ca297) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x80000000}}, 0x18) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) getuid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xffffffffffffff9f) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)='fuseblk\x00', 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB=',dont]apprai']) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 75.774631] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/2996 [ 75.783232] caller is __this_cpu_preempt_check+0x1d/0x30 [ 75.789238] CPU: 1 PID: 2996 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 75.796252] 0000000000000000 5824712b24770a3d ffff8800bb81f5f8 ffffffff81aad1a1 [ 75.804353] ffff8800ba0baf80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 75.812592] 0000000000000001 ffff8800bb81f638 ffffffff81b0ad83 ffff8800b2683180 [ 75.820657] Call Trace: [ 75.823243] [] dump_stack+0xc1/0x120 [ 75.828614] [] check_preemption_disabled+0x1d3/0x200 [ 75.835380] [] __this_cpu_preempt_check+0x1d/0x30 [ 75.841891] [] tcp_try_coalesce+0x245/0x510 [ 75.841901] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 75.841912] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 75.841920] [] tcp_queue_rcv+0x127/0x6f0 [ 75.841929] [] tcp_send_rcvq+0x3de/0x4a0 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 75.841938] [] ? tcp_rcv_established+0x2070/0x2070 [ 75.841948] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 75.841955] [] ? lock_sock_nested+0x90/0x120 [ 75.841962] [] ? trace_hardirqs_on+0xd/0x10 [ 75.841970] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 75.841976] [] tcp_sendmsg+0x2332/0x2ab0 [ 75.841983] [] ? trace_hardirqs_on+0x10/0x10 [ 75.841992] [] ? sock_has_perm+0x2a8/0x400 [ 75.842000] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 75.842009] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 12:19:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 75.842015] [] ? tcp_sendpage+0x17c0/0x17c0 [ 75.842024] [] ? check_preemption_disabled+0x3c/0x200 [ 75.842030] [] ? check_preemption_disabled+0x3c/0x200 [ 75.842038] [] ? inet_sendmsg+0x143/0x4d0 [ 75.842046] [] inet_sendmsg+0x202/0x4d0 [ 75.842052] [] ? inet_sendmsg+0x76/0x4d0 [ 75.842058] [] ? inet_recvmsg+0x4d0/0x4d0 [ 75.842066] [] sock_sendmsg+0xbe/0x110 [ 75.842074] [] ___sys_sendmsg+0x369/0x890 [ 75.842082] [] ? copy_msghdr_from_user+0x550/0x550 [ 75.842092] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 75.842099] [] ? futex_wake+0x166/0x490 [ 75.842105] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 75.842112] [] ? check_preemption_disabled+0x3c/0x200 12:19:46 executing program 1: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x3a, 0x1, 0xfa, "62e8004915d3295d51a81ff568433985", "ad8a8b57aa1dd5c605cce3650ecaa33ee15d14c02e8886e500a62be0a9ad7500368c5ce8df"}, 0x3a, 0x1) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00\x1f;p\r\xfdT\'P\xe7\xae\x1c3r\xb96G\x9ba\xe7\xbd\xa7\x17=ySEN5Lq\xd0>Q\xf9\xe8\xa3\x80\x94\x8c\x8e5\x916\xd0>\xc4\xe3\x8e\xe6\x96{7{\x0f\xe8\x9agH-\xa3Q\a\xdd\x82\x1fC\xbc$\x1d \xc0=\x93\xed\\\xbfapC+J\x81D\x98k\\', 0x0, &(0x7f00000002c0)) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x20) [ 75.842119] [] ? check_preemption_disabled+0x3c/0x200 [ 75.842128] [] ? __fget+0x13b/0x370 [ 75.842135] [] ? __fget+0x162/0x370 [ 75.842141] [] ? __fget+0x47/0x370 [ 75.842149] [] ? __fget_light+0xa3/0x1f0 [ 75.842156] [] ? __fdget+0x1b/0x20 [ 75.842164] [] ? sockfd_lookup_light+0xb4/0x160 [ 75.842173] [] __sys_sendmmsg+0x1d6/0x2e0 [ 75.842181] [] ? SyS_sendmsg+0x50/0x50 [ 75.842188] [] ? __might_fault+0x95/0x1d0 [ 75.842197] [] ? SyS_clock_gettime+0x118/0x1e0 [ 75.842204] [] ? SyS_clock_settime+0x220/0x220 [ 75.842213] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 75.842222] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 75.842237] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 75.842245] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 75.842253] [] compat_SyS_sendmmsg+0x32/0x40 [ 75.842260] [] ? compat_SyS_sendmsg+0x40/0x40 [ 75.842270] [] do_fast_syscall_32+0x32d/0xa90 [ 75.842279] [] sysenter_flags_fixed+0xd/0x1a [ 76.043189] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/3022 [ 76.043200] caller is __this_cpu_preempt_check+0x1d/0x30 [ 76.043210] CPU: 1 PID: 3022 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 76.043222] 0000000000000000 f4d1344fe8c6ceda ffff8800b68075f8 ffffffff81aad1a1 [ 76.043232] ffff88009f248000 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 76.043243] 0000000000000001 ffff8800b6807638 ffffffff81b0ad83 ffff8800b83de280 [ 76.043244] Call Trace: [ 76.043255] [] dump_stack+0xc1/0x120 [ 76.043262] [] check_preemption_disabled+0x1d3/0x200 [ 76.043274] [] __this_cpu_preempt_check+0x1d/0x30 [ 76.043284] [] tcp_try_coalesce+0x245/0x510 [ 76.043292] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 76.043304] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 76.043313] [] tcp_queue_rcv+0x127/0x6f0 [ 76.043322] [] tcp_send_rcvq+0x3de/0x4a0 [ 76.043331] [] ? tcp_rcv_established+0x2070/0x2070 [ 76.043340] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 76.043347] [] ? lock_sock_nested+0x90/0x120 [ 76.043354] [] ? trace_hardirqs_on+0xd/0x10 [ 76.043363] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 76.043371] [] tcp_sendmsg+0x2332/0x2ab0 [ 76.043378] [] ? trace_hardirqs_on+0x10/0x10 [ 76.043387] [] ? sock_has_perm+0x2a8/0x400 [ 76.043396] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 76.043405] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 76.043412] [] ? tcp_sendpage+0x17c0/0x17c0 [ 76.043420] [] ? check_preemption_disabled+0x3c/0x200 [ 76.043427] [] ? check_preemption_disabled+0x3c/0x200 [ 76.043435] [] ? inet_sendmsg+0x143/0x4d0 [ 76.043443] [] inet_sendmsg+0x202/0x4d0 [ 76.043449] [] ? inet_sendmsg+0x76/0x4d0 [ 76.043456] [] ? inet_recvmsg+0x4d0/0x4d0 [ 76.043465] [] sock_sendmsg+0xbe/0x110 [ 76.043473] [] ___sys_sendmsg+0x369/0x890 [ 76.043481] [] ? copy_msghdr_from_user+0x550/0x550 [ 76.043491] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 76.043498] [] ? futex_wake+0x166/0x490 [ 76.043506] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 76.043513] [] ? check_preemption_disabled+0x3c/0x200 [ 76.043521] [] ? check_preemption_disabled+0x3c/0x200 [ 76.043530] [] ? __fget+0x13b/0x370 [ 76.043537] [] ? __fget+0x162/0x370 [ 76.043544] [] ? __fget+0x47/0x370 [ 76.043552] [] ? __fget_light+0xa3/0x1f0 [ 76.043560] [] ? __fdget+0x1b/0x20 [ 76.043568] [] ? sockfd_lookup_light+0xb4/0x160 [ 76.043576] [] __sys_sendmmsg+0x1d6/0x2e0 [ 76.043584] [] ? SyS_sendmsg+0x50/0x50 [ 76.043593] [] ? __might_fault+0x95/0x1d0 [ 76.043601] [] ? SyS_clock_gettime+0x118/0x1e0 [ 76.043608] [] ? SyS_clock_settime+0x220/0x220 [ 76.043617] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 76.043626] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 76.043635] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 76.043644] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 76.043652] [] compat_SyS_sendmmsg+0x32/0x40 [ 76.043659] [] ? compat_SyS_sendmsg+0x40/0x40 [ 76.043669] [] do_fast_syscall_32+0x32d/0xa90 [ 76.043679] [] sysenter_flags_fixed+0xd/0x1a [ 76.127396] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.4/3025 [ 76.127407] caller is __this_cpu_preempt_check+0x1d/0x30 [ 76.127416] CPU: 1 PID: 3025 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 76.127428] 0000000000000000 dbdc52d0674ebc9b ffff8801d586f5f8 ffffffff81aad1a1 [ 76.127438] ffff88009f24af80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 76.127448] 0000000000000001 ffff8801d586f638 ffffffff81b0ad83 ffff8800b83de780 [ 76.127449] Call Trace: [ 76.127463] [] dump_stack+0xc1/0x120 [ 76.127472] [] check_preemption_disabled+0x1d3/0x200 [ 76.127480] [] __this_cpu_preempt_check+0x1d/0x30 [ 76.127490] [] tcp_try_coalesce+0x245/0x510 [ 76.127499] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 76.127508] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 76.127516] [] tcp_queue_rcv+0x127/0x6f0 [ 76.127524] [] tcp_send_rcvq+0x3de/0x4a0 [ 76.127533] [] ? tcp_rcv_established+0x2070/0x2070 [ 76.127542] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 76.127549] [] ? lock_sock_nested+0x90/0x120 [ 76.127556] [] ? trace_hardirqs_on+0xd/0x10 [ 76.127564] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 76.127572] [] tcp_sendmsg+0x2332/0x2ab0 [ 76.127579] [] ? trace_hardirqs_on+0x10/0x10 [ 76.127588] [] ? sock_has_perm+0x2a8/0x400 [ 76.127596] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 76.127604] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 76.127611] [] ? tcp_sendpage+0x17c0/0x17c0 [ 76.127619] [] ? check_preemption_disabled+0x3c/0x200 [ 76.127626] [] ? check_preemption_disabled+0x3c/0x200 [ 76.127634] [] ? inet_sendmsg+0x143/0x4d0 [ 76.127641] [] inet_sendmsg+0x202/0x4d0 [ 76.127648] [] ? inet_sendmsg+0x76/0x4d0 [ 76.127655] [] ? inet_recvmsg+0x4d0/0x4d0 [ 76.127663] [] sock_sendmsg+0xbe/0x110 [ 76.127672] [] ___sys_sendmsg+0x369/0x890 [ 76.127681] [] ? copy_msghdr_from_user+0x550/0x550 [ 76.127690] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 76.127698] [] ? futex_wake+0x166/0x490 [ 76.127715] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 76.127725] [] ? check_preemption_disabled+0x3c/0x200 [ 76.127733] [] ? check_preemption_disabled+0x3c/0x200 [ 76.127743] [] ? __fget+0x13b/0x370 [ 76.127751] [] ? __fget+0x162/0x370 [ 76.127759] [] ? __fget+0x47/0x370 [ 76.127768] [] ? __fget_light+0xa3/0x1f0 [ 76.127775] [] ? __fdget+0x1b/0x20 [ 76.127783] [] ? sockfd_lookup_light+0xb4/0x160 [ 76.127791] [] __sys_sendmmsg+0x1d6/0x2e0 [ 76.127800] [] ? SyS_sendmsg+0x50/0x50 [ 76.127808] [] ? __might_fault+0x95/0x1d0 [ 76.127816] [] ? SyS_clock_gettime+0x118/0x1e0 [ 76.127824] [] ? SyS_clock_settime+0x220/0x220 [ 76.127833] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 76.127842] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 76.127851] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 76.127859] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 76.127867] [] compat_SyS_sendmmsg+0x32/0x40 [ 76.127874] [] ? compat_SyS_sendmsg+0x40/0x40 [ 76.127883] [] do_fast_syscall_32+0x32d/0xa90 [ 76.127893] [] sysenter_flags_fixed+0xd/0x1a [ 76.353906] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.2/3087 [ 76.353917] caller is __this_cpu_preempt_check+0x1d/0x30 [ 76.353925] CPU: 1 PID: 3087 Comm: syz-executor.2 Not tainted 4.4.174+ #17 [ 76.353938] 0000000000000000 bbc02284b59db1f0 ffff8801d62a75f8 ffffffff81aad1a1 [ 76.353948] ffff8800b8b32f80 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 76.353958] 0000000000000001 ffff8801d62a7638 ffffffff81b0ad83 ffff8801d5a97b80 [ 76.353959] Call Trace: [ 76.353971] [] dump_stack+0xc1/0x120 [ 76.353979] [] check_preemption_disabled+0x1d3/0x200 [ 76.353988] [] __this_cpu_preempt_check+0x1d/0x30 [ 76.353998] [] tcp_try_coalesce+0x245/0x510 [ 76.354006] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 76.354016] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 76.354023] [] tcp_queue_rcv+0x127/0x6f0 [ 76.354031] [] tcp_send_rcvq+0x3de/0x4a0 [ 76.354039] [] ? tcp_rcv_established+0x2070/0x2070 [ 76.354047] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 76.354054] [] ? lock_sock_nested+0x90/0x120 [ 76.354061] [] ? trace_hardirqs_on+0xd/0x10 [ 76.354070] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 76.354078] [] tcp_sendmsg+0x2332/0x2ab0 [ 76.354084] [] ? trace_hardirqs_on+0x10/0x10 [ 76.354092] [] ? sock_has_perm+0x2a8/0x400 [ 76.354100] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 76.354109] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 76.354116] [] ? tcp_sendpage+0x17c0/0x17c0 [ 76.354123] [] ? check_preemption_disabled+0x3c/0x200 [ 76.354129] [] ? check_preemption_disabled+0x3c/0x200 [ 76.354137] [] ? inet_sendmsg+0x143/0x4d0 [ 76.354144] [] inet_sendmsg+0x202/0x4d0 [ 76.354150] [] ? inet_sendmsg+0x76/0x4d0 [ 76.354157] [] ? inet_recvmsg+0x4d0/0x4d0 [ 76.354165] [] sock_sendmsg+0xbe/0x110 [ 76.354173] [] ___sys_sendmsg+0x369/0x890 [ 76.354181] [] ? copy_msghdr_from_user+0x550/0x550 [ 76.354188] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 76.354195] [] ? check_preemption_disabled+0x3c/0x200 [ 76.354202] [] ? check_preemption_disabled+0x3c/0x200 [ 76.354210] [] ? __fget+0x13b/0x370 [ 76.354217] [] ? __fget+0x162/0x370 [ 76.354223] [] ? __fget+0x47/0x370 [ 76.354231] [] ? __fget_light+0xa3/0x1f0 [ 76.354237] [] ? __fdget+0x1b/0x20 [ 76.354245] [] ? sockfd_lookup_light+0xb4/0x160 [ 76.354253] [] __sys_sendmmsg+0x1d6/0x2e0 [ 76.354261] [] ? SyS_sendmsg+0x50/0x50 [ 76.354269] [] ? __might_fault+0x95/0x1d0 [ 76.354277] [] ? SyS_clock_gettime+0x118/0x1e0 [ 76.354284] [] ? SyS_clock_settime+0x220/0x220 [ 76.354293] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 76.354301] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 76.354310] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 76.354317] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 76.354326] [] compat_SyS_sendmmsg+0x32/0x40 [ 76.354332] [] ? compat_SyS_sendmsg+0x40/0x40 [ 76.354342] [] do_fast_syscall_32+0x32d/0xa90 [ 76.354350] [] sysenter_flags_fixed+0xd/0x1a 12:19:48 executing program 3: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, 0x0, 0x0, 0x80800) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000480)=0x8b21d7b36ca52682) r4 = syz_open_procfs(r3, &(0x7f0000000300)='coredump_filter\x00') ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000500)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x4003, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0, 0x2000000, 0x9, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) fsetxattr$security_smack_transmute(r1, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='\x00\x00S\x00', 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0xfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000f59ffc)=0x194, 0x4) socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000000c0)=0x6, 0x15a) r7 = getpid() creat(&(0x7f00000007c0)='./file0\x00', 0x800000000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) write$cgroup_int(r8, &(0x7f00000001c0)=0x8003, 0x2d3) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"/513], 0x1f1}, 0x0) accept4$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x23a, 0x80000) unlink(&(0x7f0000000000)='./file0\x00') ptrace$setopts(0x4206, r7, 0x2, 0x100001) sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18f}}, {0x0, 0x7}}}, 0xa0) 12:19:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='Qdev/n\xb6\xe5/tun\x00', 0x100, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x462842) r2 = dup2(r0, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r6, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r7, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r8, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x31) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r10, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16, @ANYPTR], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES16=r10, @ANYRES16=r3, @ANYRESOCT=r5, @ANYPTR64, @ANYRESOCT=r6, @ANYRESHEX=r3, @ANYRESDEC=r7, @ANYRESDEC=r8, @ANYRESOCT=0x0], @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="ead21df272f2432357819711"], @ANYRES32=r1, @ANYRESHEX, @ANYRES32=0x0], 0x4}}, 0x810) fchdir(r3) r11 = creat(&(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f00000005c0)) ioctl$FS_IOC_RESVSP(r11, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r11, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'eql\x01\x00\x00\x00#\x00', 0x43732e5398416f19}) r14 = memfd_create(&(0x7f0000000140)='/d-\x1b\xb3\x82\xf9/J\xb0p*\xd8\x00\xea\x03\x83\xd8\x16\x88Qt\xceh\xeb\xb2\xc4\xfbf\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT\x8a\xec\a\xc9-;\xf55n\xd1~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{\xa9\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\x02\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9e\xe8Q\xd3\xe9S0\xb9\xb0\'\xf5\x05\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xad\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa331\x19\x8a\xc8:\xa1\xe6\xc2)', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r14, &(0x7f0000000040)={0xa3}, 0x2e8) sendfile(r14, r14, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r14, 0x0) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000000a00)={'nr0\x00', 0x400}) write(r12, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f0000000280)) fsync(r11) write$P9_RSTATu(r11, &(0x7f0000000580)=ANY=[], 0x87) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xfcf, &(0x7f0000000cc0)="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", 0x3, 0x0, &(0x7f00000000c0)='XKP'}) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001000d}, 0x0) [ 78.373329] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/3136 [ 78.381954] caller is __this_cpu_preempt_check+0x1d/0x30 [ 78.387426] CPU: 0 PID: 3136 Comm: syz-executor.0 Not tainted 4.4.174+ #17 [ 78.394442] 0000000000000000 2f7094daab3b8e4d ffff8800b6b2f5f8 ffffffff81aad1a1 [ 78.402533] ffff8800ba30c740 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 78.410609] 0000000000000002 ffff8800b6b2f638 ffffffff81b0ad83 ffff8801d773f180 [ 78.418693] Call Trace: [ 78.421290] [] dump_stack+0xc1/0x120 [ 78.426664] [] check_preemption_disabled+0x1d3/0x200 [ 78.433434] [] __this_cpu_preempt_check+0x1d/0x30 [ 78.439944] [] tcp_try_coalesce+0x245/0x510 [ 78.445934] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 78.452969] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 78.460091] [] tcp_queue_rcv+0x127/0x6f0 [ 78.465832] [] tcp_send_rcvq+0x3de/0x4a0 [ 78.471573] [] ? tcp_rcv_established+0x2070/0x2070 [ 78.478170] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 78.485031] [] ? lock_sock_nested+0x90/0x120 [ 78.491136] [] ? trace_hardirqs_on+0xd/0x10 [ 78.497127] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 78.503469] [] tcp_sendmsg+0x2332/0x2ab0 [ 78.509202] [] ? trace_hardirqs_on+0x10/0x10 [ 78.515292] [] ? sock_has_perm+0x2a8/0x400 [ 78.521199] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 78.528765] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 78.535542] [] ? tcp_sendpage+0x17c0/0x17c0 [ 78.541535] [] ? check_preemption_disabled+0x3c/0x200 [ 78.548389] [] ? check_preemption_disabled+0x3c/0x200 [ 78.555231] [] ? inet_sendmsg+0x143/0x4d0 [ 78.561014] [] inet_sendmsg+0x202/0x4d0 [ 78.566621] [] ? inet_sendmsg+0x76/0x4d0 [ 78.572315] [] ? inet_recvmsg+0x4d0/0x4d0 [ 78.578096] [] sock_sendmsg+0xbe/0x110 [ 78.583631] [] ___sys_sendmsg+0x369/0x890 [ 78.589423] [] ? copy_msghdr_from_user+0x550/0x550 [ 78.595987] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 78.602808] [] ? futex_wake+0x166/0x490 [ 78.608414] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 78.615159] [] ? check_preemption_disabled+0x3c/0x200 [ 78.621983] [] ? check_preemption_disabled+0x3c/0x200 [ 78.628806] [] ? __fget+0x13b/0x370 [ 78.634082] [] ? __fget+0x162/0x370 [ 78.639339] [] ? __fget+0x47/0x370 [ 78.644662] [] ? __fget_light+0xa3/0x1f0 [ 78.650377] [] ? __fdget+0x1b/0x20 [ 78.655567] [] ? sockfd_lookup_light+0xb4/0x160 [ 78.661956] [] __sys_sendmmsg+0x1d6/0x2e0 [ 78.667754] [] ? SyS_sendmsg+0x50/0x50 [ 78.673293] [] ? __might_fault+0x95/0x1d0 [ 78.679078] [] ? SyS_clock_gettime+0x118/0x1e0 [ 78.685311] [] ? SyS_clock_settime+0x220/0x220 [ 78.691615] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 78.697767] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 78.704856] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 78.711696] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 78.718538] [] compat_SyS_sendmmsg+0x32/0x40 12:19:48 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0x1, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000980), &(0x7f0000000580)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) lseek(0xffffffffffffffff, 0x4, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r7 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x1e978dd449e41d22, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x1122) getsockname(r7, &(0x7f00000001c0)=@rc, &(0x7f0000000080)=0xffffffffffffff9f) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @timestamp, @timestamp], 0x5) 12:19:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 78.724580] [] ? compat_SyS_sendmsg+0x40/0x40 [ 78.730725] [] do_fast_syscall_32+0x32d/0xa90 [ 78.736864] [] sysenter_flags_fixed+0xd/0x1a [ 78.754675] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.2/3154 [ 78.763416] caller is __this_cpu_preempt_check+0x1d/0x30 [ 78.768935] CPU: 0 PID: 3154 Comm: syz-executor.2 Not tainted 4.4.174+ #17 [ 78.775960] 0000000000000000 b42ecda2477947ad ffff88009e4575f8 ffffffff81aad1a1 [ 78.784084] ffff88009e448000 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 78.792170] 0000000000000002 ffff88009e457638 ffffffff81b0ad83 ffff8801d773f680 [ 78.800277] Call Trace: [ 78.802883] [] dump_stack+0xc1/0x120 [ 78.808266] [] check_preemption_disabled+0x1d3/0x200 [ 78.815037] [] __this_cpu_preempt_check+0x1d/0x30 [ 78.821547] [] tcp_try_coalesce+0x245/0x510 [ 78.827538] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 78.834579] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 78.841701] [] tcp_queue_rcv+0x127/0x6f0 [ 78.847539] [] tcp_send_rcvq+0x3de/0x4a0 [ 78.853291] [] ? tcp_rcv_established+0x2070/0x2070 [ 78.859894] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 78.866761] [] ? lock_sock_nested+0x90/0x120 [ 78.872838] [] ? trace_hardirqs_on+0xd/0x10 [ 78.878828] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 78.885167] [] tcp_sendmsg+0x2332/0x2ab0 [ 78.890898] [] ? trace_hardirqs_on+0x10/0x10 [ 78.896978] [] ? sock_has_perm+0x2a8/0x400 [ 78.902890] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 78.910453] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 78.917232] [] ? tcp_sendpage+0x17c0/0x17c0 [ 78.923226] [] ? check_preemption_disabled+0x3c/0x200 [ 78.930102] [] ? check_preemption_disabled+0x3c/0x200 [ 78.936961] [] ? inet_sendmsg+0x143/0x4d0 [ 78.942805] [] inet_sendmsg+0x202/0x4d0 [ 78.948442] [] ? inet_sendmsg+0x76/0x4d0 [ 78.954421] [] ? inet_recvmsg+0x4d0/0x4d0 [ 78.960232] [] sock_sendmsg+0xbe/0x110 [ 78.965790] [] ___sys_sendmsg+0x369/0x890 [ 78.971605] [] ? copy_msghdr_from_user+0x550/0x550 [ 78.978198] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 78.984972] [] ? check_preemption_disabled+0x3c/0x200 [ 78.991829] [] ? check_preemption_disabled+0x3c/0x200 [ 78.998799] [] ? __fget+0x13b/0x370 [ 79.004095] [] ? __fget+0x162/0x370 [ 79.009392] [] ? __fget+0x47/0x370 [ 79.014846] [] ? __fget_light+0xa3/0x1f0 [ 79.020554] [] ? __fdget+0x1b/0x20 [ 79.025729] [] ? sockfd_lookup_light+0xb4/0x160 [ 79.032032] [] __sys_sendmmsg+0x1d6/0x2e0 [ 79.037813] [] ? SyS_sendmsg+0x50/0x50 [ 79.043335] [] ? __might_fault+0x95/0x1d0 [ 79.049130] [] ? SyS_clock_gettime+0x118/0x1e0 [ 79.055348] [] ? SyS_clock_settime+0x220/0x220 [ 79.061572] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 79.067763] [] ? __compat_put_timespec.isra.0+0xce/0x140 12:19:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 79.074889] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 79.081734] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 79.088575] [] compat_SyS_sendmmsg+0x32/0x40 [ 79.094615] [] ? compat_SyS_sendmsg+0x40/0x40 [ 79.100890] [] do_fast_syscall_32+0x32d/0xa90 [ 79.107063] [] sysenter_flags_fixed+0xd/0x1a 12:19:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 79.194634] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.2/3168 [ 79.203868] caller is __this_cpu_preempt_check+0x1d/0x30 [ 79.210018] CPU: 0 PID: 3168 Comm: syz-executor.2 Not tainted 4.4.174+ #17 [ 79.217059] 0000000000000000 ae4202850f9faa89 ffff8800b6b2f5f8 ffffffff81aad1a1 [ 79.225198] ffff88009e450000 0000000000000000 ffffffff82a861e0 ffffffff8292c040[ 79.231704] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/3171 [ 79.231720] caller is __this_cpu_preempt_check+0x1d/0x30 [ 79.246934] [ 79.248853] 0000000000000002 ffff8800b6b2f638 ffffffff81b0ad83 ffff8800b6454500 [ 79.256902] Call Trace: [ 79.259512] [] dump_stack+0xc1/0x120 [ 79.264868] [] check_preemption_disabled+0x1d3/0x200 [ 79.271960] [] __this_cpu_preempt_check+0x1d/0x30 [ 79.278443] [] tcp_try_coalesce+0x245/0x510 [ 79.284403] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 79.291409] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 79.298531] [] tcp_queue_rcv+0x127/0x6f0 [ 79.304234] [] tcp_send_rcvq+0x3de/0x4a0 [ 79.310031] [] ? tcp_rcv_established+0x2070/0x2070 [ 79.316626] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 79.323474] [] ? lock_sock_nested+0x90/0x120 [ 79.329616] [] ? trace_hardirqs_on+0xd/0x10 [ 79.335587] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 79.341897] [] tcp_sendmsg+0x2332/0x2ab0 [ 79.347599] [] ? trace_hardirqs_on+0x10/0x10 [ 79.353735] [] ? sock_has_perm+0x2a8/0x400 [ 79.359613] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 79.367138] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 79.373884] [] ? tcp_sendpage+0x17c0/0x17c0 [ 79.379845] [] ? check_preemption_disabled+0x3c/0x200 [ 79.386678] [] ? check_preemption_disabled+0x3c/0x200 [ 79.393510] [] ? inet_sendmsg+0x143/0x4d0 [ 79.399297] [] inet_sendmsg+0x202/0x4d0 [ 79.404909] [] ? inet_sendmsg+0x76/0x4d0 [ 79.410622] [] ? inet_recvmsg+0x4d0/0x4d0 [ 79.416408] [] sock_sendmsg+0xbe/0x110 [ 79.421932] [] ___sys_sendmsg+0x369/0x890 [ 79.427726] [] ? copy_msghdr_from_user+0x550/0x550 [ 79.434300] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 79.441159] [] ? futex_wake+0x166/0x490 [ 79.446777] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 79.453519] [] ? check_preemption_disabled+0x3c/0x200 [ 79.460348] [] ? check_preemption_disabled+0x3c/0x200 [ 79.467179] [] ? __fget+0x13b/0x370 [ 79.472445] [] ? __fget+0x162/0x370 [ 79.477709] [] ? __fget+0x47/0x370 [ 79.482892] [] ? __fget_light+0xa3/0x1f0 [ 79.488603] [] ? __fdget+0x1b/0x20 [ 79.493799] [] ? sockfd_lookup_light+0xb4/0x160 [ 79.500127] [] __sys_sendmmsg+0x1d6/0x2e0 [ 79.505914] [] ? SyS_sendmsg+0x50/0x50 [ 79.511444] [] ? __might_fault+0x95/0x1d0 [ 79.517231] [] ? SyS_clock_gettime+0x118/0x1e0 [ 79.523455] [] ? SyS_clock_settime+0x220/0x220 [ 79.529678] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 79.535812] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 79.542901] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 79.549764] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 79.556594] [] compat_SyS_sendmmsg+0x32/0x40 [ 79.562640] [] ? compat_SyS_sendmsg+0x40/0x40 [ 79.568781] [] do_fast_syscall_32+0x32d/0xa90 [ 79.574918] [] sysenter_flags_fixed+0xd/0x1a [ 79.580970] CPU: 1 PID: 3171 Comm: syz-executor.0 Not tainted 4.4.174+ #17 [ 79.588000] 0000000000000000 7643f79e8612711b ffff8801b819f5f8 ffffffff81aad1a1 [ 79.596072] ffff8801b8804740 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 79.604150] 0000000000000001 ffff8801b819f638 ffffffff81b0ad83 ffff8800b5e4f400 [ 79.612182] Call Trace: [ 79.614762] [] dump_stack+0xc1/0x120 [ 79.620115] [] check_preemption_disabled+0x1d3/0x200 [ 79.626848] [] __this_cpu_preempt_check+0x1d/0x30 [ 79.633324] [] tcp_try_coalesce+0x245/0x510 [ 79.639276] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 79.646287] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 79.653386] [] tcp_queue_rcv+0x127/0x6f0 [ 79.659079] [] tcp_send_rcvq+0x3de/0x4a0 [ 79.664787] [] ? tcp_rcv_established+0x2070/0x2070 [ 79.671369] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 79.678194] [] ? lock_sock_nested+0x90/0x120 [ 79.684251] [] ? trace_hardirqs_on+0xd/0x10 [ 79.690293] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 79.696593] [] tcp_sendmsg+0x2332/0x2ab0 [ 79.702301] [] ? trace_hardirqs_on+0x10/0x10 [ 79.708342] [] ? sock_has_perm+0x2a8/0x400 [ 79.714209] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 79.721730] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 79.728466] [] ? tcp_sendpage+0x17c0/0x17c0 [ 79.734421] [] ? check_preemption_disabled+0x3c/0x200 [ 79.741256] [] ? check_preemption_disabled+0x3c/0x200 [ 79.748080] [] ? inet_sendmsg+0x143/0x4d0 [ 79.753869] [] inet_sendmsg+0x202/0x4d0 [ 79.759475] [] ? inet_sendmsg+0x76/0x4d0 [ 79.765166] [] ? inet_recvmsg+0x4d0/0x4d0 [ 79.770948] [] sock_sendmsg+0xbe/0x110 [ 79.776470] [] ___sys_sendmsg+0x369/0x890 [ 79.782258] [] ? copy_msghdr_from_user+0x550/0x550 [ 79.788828] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 79.795668] [] ? futex_wake+0x166/0x490 [ 79.801288] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 79.808028] [] ? check_preemption_disabled+0x3c/0x200 [ 79.814863] [] ? check_preemption_disabled+0x3c/0x200 [ 79.821691] [] ? __fget+0x13b/0x370 [ 79.827073] [] ? __fget+0x162/0x370 [ 79.832370] [] ? __fget+0x47/0x370 [ 79.837698] [] ? __fget_light+0xa3/0x1f0 [ 79.843429] [] ? __fdget+0x1b/0x20 [ 79.848619] [] ? sockfd_lookup_light+0xb4/0x160 [ 79.854928] [] __sys_sendmmsg+0x1d6/0x2e0 [ 79.860707] [] ? SyS_sendmsg+0x50/0x50 [ 79.866244] [] ? __might_fault+0x95/0x1d0 [ 79.872037] [] ? SyS_clock_gettime+0x118/0x1e0 [ 79.878262] [] ? SyS_clock_settime+0x220/0x220 [ 79.884488] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 79.890620] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 79.897703] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 79.904529] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 79.911789] [] compat_SyS_sendmmsg+0x32/0x40 [ 79.918523] [] ? compat_SyS_sendmsg+0x40/0x40 [ 79.924669] [] do_fast_syscall_32+0x32d/0xa90 [ 79.930801] [] sysenter_flags_fixed+0xd/0x1a 12:19:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) write$FUSE_OPEN(r2, &(0x7f0000001440)={0x20}, 0x20) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000140)=""/41) ioctl$RTC_PIE_ON(r2, 0x7005) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) write$FUSE_WRITE(r5, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x40000000000025d, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 12:19:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:49 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:49 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x34041, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0x1100082) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000480)={0x0, @empty}, &(0x7f0000000780)=0xfffffffffffffd1b) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000007c0)={@loopback, r6}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', r6}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@ipv4={[], [], @empty}, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x3, 0x1, 0xc00, 0x4, 0x20008, r7}) r8 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r8) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"}, 0x38) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000180)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendfile(r3, r3, 0x0, 0x2000005) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) sendfile(r2, r3, &(0x7f00000000c0)=0x80000000, 0xff) [ 80.170857] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/3186 [ 80.179689] caller is __this_cpu_preempt_check+0x1d/0x30 [ 80.185163] CPU: 1 PID: 3186 Comm: syz-executor.0 Not tainted 4.4.174+ #17 [ 80.192178] 0000000000000000 8125c5bd37959502 ffff8801d362f5f8 ffffffff81aad1a1 [ 80.200389] ffff8801d7195f00 0000000000000001 ffffffff82a861e0 ffffffff8292c040 [ 80.208481] 0000000000000001 ffff8801d362f638 ffffffff81b0ad83 ffff8800b6623b80 [ 80.216556] Call Trace: [ 80.219147] [] dump_stack+0xc1/0x120 [ 80.224629] [] check_preemption_disabled+0x1d3/0x200 [ 80.231449] [] __this_cpu_preempt_check+0x1d/0x30 [ 80.237943] [] tcp_try_coalesce+0x245/0x510 [ 80.243924] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 80.250959] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 80.258074] [] tcp_queue_rcv+0x127/0x6f0 [ 80.263813] [] tcp_send_rcvq+0x3de/0x4a0 [ 80.269540] [] ? tcp_rcv_established+0x2070/0x2070 [ 80.276136] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 80.278958] audit: type=1400 audit(1575202789.956:14): avc: denied { dyntransition } for pid=3183 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=process permissive=1 [ 80.305909] [] ? lock_sock_nested+0x90/0x120 [ 80.311969] [] ? trace_hardirqs_on+0xd/0x10 [ 80.317945] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 80.324268] [] tcp_sendmsg+0x2332/0x2ab0 [ 80.329981] [] ? trace_hardirqs_on+0x10/0x10 [ 80.336037] [] ? sock_has_perm+0x2a8/0x400 [ 80.341932] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 80.349459] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 80.356223] [] ? tcp_sendpage+0x17c0/0x17c0 [ 80.362182] [] ? check_preemption_disabled+0x3c/0x200 [ 80.369023] [] ? check_preemption_disabled+0x3c/0x200 [ 80.375857] [] ? inet_sendmsg+0x143/0x4d0 [ 80.381740] [] inet_sendmsg+0x202/0x4d0 [ 80.387375] [] ? inet_sendmsg+0x76/0x4d0 [ 80.393100] [] ? inet_recvmsg+0x4d0/0x4d0 [ 80.398915] [] sock_sendmsg+0xbe/0x110 [ 80.404470] [] ___sys_sendmsg+0x369/0x890 [ 80.410288] [] ? copy_msghdr_from_user+0x550/0x550 [ 80.416966] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 80.423732] [] ? check_preemption_disabled+0x3c/0x200 [ 80.430588] [] ? check_preemption_disabled+0x3c/0x200 [ 80.437443] [] ? __fget+0x13b/0x370 [ 80.442731] [] ? __fget+0x162/0x370 [ 80.448013] [] ? __fget+0x47/0x370 [ 80.453208] [] ? __fget_light+0xa3/0x1f0 [ 80.458927] [] ? __fdget+0x1b/0x20 [ 80.464123] [] ? sockfd_lookup_light+0xb4/0x160 [ 80.470459] [] __sys_sendmmsg+0x1d6/0x2e0 [ 80.476270] [] ? SyS_sendmsg+0x50/0x50 [ 80.481826] [] ? __might_fault+0x95/0x1d0 [ 80.487635] [] ? SyS_clock_gettime+0x118/0x1e0 [ 80.493883] [] ? SyS_clock_settime+0x220/0x220 [ 80.500152] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 80.506309] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 80.513424] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 80.520282] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 80.527142] [] compat_SyS_sendmmsg+0x32/0x40 [ 80.533212] [] ? compat_SyS_sendmsg+0x40/0x40 [ 80.539383] [] do_fast_syscall_32+0x32d/0xa90 [ 80.545541] [] sysenter_flags_fixed+0xd/0x1a 12:19:50 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tu\xa4\x8a', 0x88000, 0x0) pipe(&(0x7f0000000040)) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) timer_settime(0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) lsetxattr$security_evm(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "d30722a7c614bf33e4c0ea86631a4c1c3e0b5896"}, 0x15, 0x2) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000440)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x10000, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f0000001500)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f00000007c0)="7060b4a4f6fe86b1a832413ffa5a54a19acfadb588c557c43e66f2610bb66a7d514748c74b14dad908ff451a91b7c3ee7b420f7582559783c6a4ad20589781f812ca27637981f8301493520b58c60e0e0e0d647acf9e7c3265236ed5ea57a85f060000001684ca4d1749414724a4f5d6d280b9fb8561f3b5b2d112474528817ce13bc33be43762f2c2c7d7120646785aabba8b2dd1b25b4b7a61210ac869d67a6f89b23a70571203c027b083f8289240f52e96591b1f504279177cf5c6fa0fad003a9d49306a9d205a6043f104d9a380d38e6808c2f68b0654cb60f3f25c2d7fcd7cfd664643d3", 0xe7, 0x6, 0x0, 0x0, r1}]) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f00000012c0)='./file0\x00', 0x18300, 0x40) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendmsg(r4, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x15acc76c) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000600)=""/192) r9 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000004c0)=0x4) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd9e) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT(r10, &(0x7f0000000280)={0x8, "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", 0x1000}, 0x1006) fsetxattr$trusted_overlay_redirect(r10, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3) 12:19:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$ppp(r0, &(0x7f00000006c0)="e2ea750c2c26c4d71c36f5f332557b644c3886dc98cfed7de82ff29c1fda8e5e157558897de3801232553447c822c1ee190f92adf7ddd6b2f11fde62f612c7b062ac39066e3418a1ff7a2568bdcd42655add50d143b6010a99124e8e89388cc4f0f6f60d3c7d6dd1ace182eeb9e0c44f6509c62f3466d7d3047b961fc532ebd6c3f28b4b5ce1ef8c8796125b7d9c31c0cfafd6e70fad8fbd9324844f27f9869627bb35b0d5077998e818eb900b564a0621baad5b4becfbbd099f83e5de0acc79acd6a982582d2e56016eb12c20b672d2800c0629b85d2de2bcaa0bf6ee059fd797", 0xe1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000000680)=0x10006) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf25030000000c00020008000100f4010000800c000900080001004e18cd4ccddbc3f5ceed66411f0000002800010008000300c67a000010000100e03177ba8ac7c38502000800040001000000100002a743de73"], 0x3}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) syncfs(r2) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffb) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 12:19:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0xedf1d44) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) r9 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) lseek(r9, 0x1, 0x1) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 12:19:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xe848f0226d36d158, &(0x7f0000000000)={@multicast1, @local}, 0xffffff62) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000540)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/144, &(0x7f0000695ffc)=0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000140)=0x54) 12:19:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) clone(0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0), &(0x7f0000000300)) ioctl(r0, 0xc0084905, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x20) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040)=0xe8, 0x8000fffffffe) mkdirat(r6, &(0x7f0000000340)='./bus/file0\x00', 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r10, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) [ 81.781434] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/3266 [ 81.790205] caller is __this_cpu_preempt_check+0x1d/0x30 [ 81.795675] CPU: 0 PID: 3266 Comm: syz-executor.0 Not tainted 4.4.174+ #17 [ 81.802692] 0000000000000000 296c2e299c0a74bd ffff8801c0aa75f8 ffffffff81aad1a1 [ 81.810797] ffff8801d4248000 0000000000000000 ffffffff82a861e0 ffffffff8292c040 [ 81.819032] 0000000000000002 ffff8801c0aa7638 ffffffff81b0ad83 ffff8801d638a000 [ 81.828396] Call Trace: [ 81.831001] [] dump_stack+0xc1/0x120 [ 81.836384] [] check_preemption_disabled+0x1d3/0x200 [ 81.843155] [] __this_cpu_preempt_check+0x1d/0x30 [ 81.849672] [] tcp_try_coalesce+0x245/0x510 [ 81.855689] [] ? tcp_prune_ofo_queue.part.0+0x460/0x460 [ 81.863418] [] ? skb_copy_datagram_from_iter+0x32b/0x5c0 [ 81.870535] [] tcp_queue_rcv+0x127/0x6f0 [ 81.876263] [] tcp_send_rcvq+0x3de/0x4a0 [ 81.882020] [] ? tcp_rcv_established+0x2070/0x2070 [ 81.888616] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 81.895479] [] ? lock_sock_nested+0x90/0x120 [ 81.901558] [] ? trace_hardirqs_on+0xd/0x10 [ 81.907551] [] ? __local_bh_enable_ip+0x6a/0xe0 [ 81.913889] [] tcp_sendmsg+0x2332/0x2ab0 [ 81.919623] [] ? trace_hardirqs_on+0x10/0x10 [ 81.925875] [] ? sock_has_perm+0x2a8/0x400 [ 81.931782] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 81.939340] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 81.946117] [] ? tcp_sendpage+0x17c0/0x17c0 [ 81.952111] [] ? check_preemption_disabled+0x3c/0x200 [ 81.958974] [] ? check_preemption_disabled+0x3c/0x200 [ 81.965829] [] ? inet_sendmsg+0x143/0x4d0 [ 81.971652] [] inet_sendmsg+0x202/0x4d0 12:19:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 81.977302] [] ? inet_sendmsg+0x76/0x4d0 [ 81.983039] [] ? inet_recvmsg+0x4d0/0x4d0 [ 81.988862] [] sock_sendmsg+0xbe/0x110 [ 81.994426] [] ___sys_sendmsg+0x369/0x890 [ 82.000248] [] ? copy_msghdr_from_user+0x550/0x550 [ 82.006849] [] ? drop_futex_key_refs.isra.0+0x5e/0xf0 [ 82.013703] [] ? futex_wake+0x166/0x490 [ 82.019442] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 82.026184] [] ? check_preemption_disabled+0x3c/0x200 [ 82.033114] [] ? check_preemption_disabled+0x3c/0x200 [ 82.039943] [] ? __fget+0x13b/0x370 [ 82.045273] [] ? __fget+0x162/0x370 [ 82.050596] [] ? __fget+0x47/0x370 [ 82.055779] [] ? __fget_light+0xa3/0x1f0 [ 82.061497] [] ? __fdget+0x1b/0x20 [ 82.066707] [] ? sockfd_lookup_light+0xb4/0x160 [ 82.073044] [] __sys_sendmmsg+0x1d6/0x2e0 [ 82.078861] [] ? SyS_sendmsg+0x50/0x50 [ 82.084415] [] ? __might_fault+0x95/0x1d0 [ 82.090235] [] ? SyS_clock_gettime+0x118/0x1e0 [ 82.096477] [] ? SyS_clock_settime+0x220/0x220 [ 82.102722] [] ? compat_SyS_futex+0x1fb/0x2f0 [ 82.109592] [] ? __compat_put_timespec.isra.0+0xce/0x140 [ 82.116889] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 82.123747] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 82.130601] [] compat_SyS_sendmmsg+0x32/0x40 [ 82.136676] [] ? compat_SyS_sendmsg+0x40/0x40 [ 82.142847] [] do_fast_syscall_32+0x32d/0xa90 [ 82.149000] [] sysenter_flags_fixed+0xd/0x1a 12:19:52 executing program 3: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, 0x0) write(r2, &(0x7f00000001c0), 0xbab230cf) ppoll(0x0, 0x0, 0x0, &(0x7f0000000580)={0x2}, 0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+'}, 0x28, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x10000) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000380)={'NETMAP\x00'}, &(0x7f0000000480)=0x1e) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4004}, 0x1c) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r6, &(0x7f0000002840)=ANY=[@ANYBLOB="8cff7cf908009700005345204c696e75781200000016c46f0006000000070000003c9f0300000000000000c2080000000000ee000001000000"], 0x38) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000100)={{0x2, 0x0, @identifier="8a6cd91577cf1c4bf10626f09174bc6c"}}) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x3}, 0x1c) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x1001, 0xffffffffffffff4d) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000002780)=""/80, &(0x7f0000002800)=0x50) getuid() openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x200601, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg(r0, &(0x7f0000002740)={&(0x7f0000000500)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/137, 0x89}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x3, &(0x7f0000000600)=""/57, 0x39}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ustat(0x1, &(0x7f00000004c0)) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x12003) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000002880)='cpuacct.usage_user\x00', 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 12:19:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:52 executing program 5: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) poll(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffe0) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000080)='cifs.spnego\x00', 0x0) add_key$keyring(&(0x7f0000000080)='\b\x00', &(0x7f0000000680)={'s{z', 0x2}, 0x0, 0x0, r6) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000880)='\xe2\xad\xa6\xd5\x95\xf5\'\xc9\xb5D\xd8\xa1\xd4\x01B\xc6B*\xb0\xa8a\x9d\xe9\xe9(\xae\x8bx\xb3?\xae\xe6\x1f4\x91=\xc0\x16\xb3@\vx\xfc\xb3G\'\x18U@,=\x90\x19xaN2M\xad\xd6\xb0l\xcb\'\xbbG\xd2\x90K\xe43\xea\x8fq\xfe\x87\x88Z\xea+\xccT\xba\xcb\x00\xd66<@\x15\xb6\xe2}/\xda|\xf5\xc2[a\x8eH+\xa8\xf4~\x18m', 0x0) add_key$keyring(&(0x7f0000000080)='\b\x00', &(0x7f0000000680)={'s{z', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r5, 0x78, 0x2}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'crc32c-intel\x00'}}, &(0x7f0000000140)="127ab91afd004d9e2e73fa169eced4bc4dbf5aa6a4cf8185f6eca33f1d268a416f9043992a319d2d888b671969b6e83ff58b6a7ab11d68f1bacef245a15383e0a2a61c8aacf446ac3028a52de668db62220747d0aaa06fb44535869d606924b0a82d05906818763c5cef7abccea2f6397c11c400132570be", &(0x7f00000001c0)=""/2) ftruncate(r4, 0x200005) sendfile(r2, r4, 0x0, 0x8000ffffffff) 12:19:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) 12:19:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}}], 0x40002c6, 0x0) [ 82.583712] input: syz1 as /devices/virtual/input/input4 [ 82.611858] SELinux: policydb string length 9895944 does not match expected length 8