6c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r11, @ANYRESDEC, @ANYBLOB="2801"]) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r14, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r14, 0x0) ioctl$FS_IOC_GETFLAGS(r14, 0x5460, &(0x7f0000000000)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) r16 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r17 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r16, 0x40086602, 0x0) write$cgroup_type(r16, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r16, r17, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r17, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r18, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r19, @ANYRESDEC, @ANYBLOB="2801"]) r20 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r20, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r21 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r20, 0x400454cc, r22) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000380)={0x2a8, 0x0, 0x3, [{{0x5, 0x1, 0x8, 0x400, 0x8001, 0x2, {0x0, 0x8, 0x7fffffff, 0x7, 0x1, 0x8, 0xfffff001, 0x9cf4, 0x80000001, 0x4, 0x1ff, r7, r10, 0xfffffffd, 0x3}}, {0x3, 0x29, 0x3, 0x8, ':[%'}}, {{0x2, 0x0, 0x9, 0x3, 0xfffffff9, 0x1af, {0x0, 0x3, 0xffff, 0x7, 0x200, 0xffffffffffff818c, 0x3, 0x8, 0x40, 0xfffffffa, 0x2, r12, r13, 0x3, 0xfffff000}}, {0x5, 0x9, 0xf, 0x1, '/dev/snd/timer\x00'}}, {{0x1, 0x3, 0xfeb0, 0xe, 0x10000, 0x7, {0x4, 0x0, 0x81, 0xeec4, 0xe4e0, 0x61e, 0x80000001, 0x0, 0x4, 0x81, 0x800, r15, r18, 0x401, 0x550e}}, {0x1, 0xb93, 0xf, 0x1, '/dev/snd/timer\x00'}}, {{0x4, 0x2, 0x9, 0x3, 0x1, 0x7, {0x1, 0xff, 0x0, 0x8, 0x8, 0xffff, 0x8, 0x5, 0x0, 0xb529, 0x1f3, r22, r23, 0x7fffffff, 0x20}}, {0x3, 0x3, 0xf, 0x3ff, '/dev/snd/timer\x00'}}]}, 0x2a8) socket$unix(0x1, 0x0, 0x0) 15:44:40 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, 0x0, &(0x7f0000000380)) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = creat(&(0x7f0000000400)='./file0\x00', 0x100) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r5, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{r6, r7/1000+30000}}, 0x200) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) setsockopt$inet6_tcp_buf(r8, 0x6, 0xb, &(0x7f0000000500)="1689917a2630b5ad070f0561d012a186c7fa3c89603964b65ef0", 0x1a) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x8c, r9, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x873}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 15:44:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, 0xfffffffffffffffd, 0x0, 0xffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x23ffffff) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r9, 0x400454cc, r11) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) fcntl$dupfd(r12, 0x0, r13) fstat(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r16 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r17 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r16, 0x40086602, 0x0) write$cgroup_type(r16, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r16, r17, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r17, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r18, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6653757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c0f937f810062d3f1ca5480d2ed07648b8e6273e36be48ea5c88c16760835bf95eb2901014501405c0a7e0b1b549edda06f4b210c8140a8938e3d3db39e785f32c2cf93c5ee2b9c235e7712ce7c4955ea3270020125204aec4619419d4ca95d265618362c32d3df67c50fa6533a6bbb6c9327abbb183d918afeefbe188cccdc4c65b75aa0027dadd78a5aa0f251410f44cbcf27b6a7926e8ed1d67e80918b38b978f512fd919447241e786ef8824c579c9d2340f2082d69f822f8", @ANYRESDEC=r19, @ANYRESDEC, @ANYBLOB="2801"]) r20 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r21 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r20, 0x40086602, 0x0) write$cgroup_type(r20, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r20, r21, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r22) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r21, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r22, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r23, @ANYRESDEC, @ANYBLOB="2801"]) r24 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r25 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r24, 0x40086602, 0x0) write$cgroup_type(r24, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r24, r25, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r26) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r25, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r26, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r27, @ANYRESDEC, @ANYBLOB="2801"]) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{0x2, 0x3, r3}, {0x2, 0x6, r6}, {0x2, 0x2, r7}, {0x2, 0xc, r8}, {0x2, 0xbf751d261d5f9fbf, 0xee01}, {0x2, 0x4, r11}], {0x4, 0x1}, [{0x8, 0x2, r14}, {0x8, 0x4, r15}, {0x8, 0x1, 0xee01}, {0x8, 0x5, r18}, {0x8, 0x4, r22}, {0x8, 0x5, r26}], {0x10, 0x1}, {0x20, 0x2}}, 0x84, 0x0) 15:44:40 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) r14 = fcntl$dupfd(r12, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = accept4$inet(r14, &(0x7f0000001380)={0x2, 0x0, @multicast2}, &(0x7f00000013c0)=0x10, 0x800) sendmsg$unix(r3, &(0x7f0000001480)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)="0f44f366a2a54cd7b237044165241d45c3666bcb00b378e75d1bd96797b6194638b38ed772b6064992fce3f6845fed4eac20782e153218569562e333478bbbfda8b3aa2f36f268", 0x47}, {&(0x7f0000000180)="13a0d9bfd26a51fc6ae583f255e1ee67168061dfc7646298fd6c632f446c91bc60c09f67e32bca4d6751e20264c16dc71f65865c467888f13562c428c34bafc3ef511343e4d9c6b3cb3a4b289a43eb399eabffab9ed7488fe49f05129a9388f1f20c49f63e8c1db1d2392b091c7c7b59f826161d2b90379e2a5772d70e49caaf5fb6f9eff995483dc00b3306d29b0dd1117b361925f1c7bfe556f705219f3966c6a9ec1c5ee219fb679714bc933ea72dd5d887a2162aca4ebfe4ca659e547bb9ff3c33a80e7ca9ea4c4a15e1a5c1ed99e212e9221e701370381b73dd7b04390f6e0cf7d8bf6d342e5f3c3e86029a54aba35ca210e9051f4b902f53a6c6caae0419f66c8392f93a5a291689c7db0593390d1871f0590ca9c6534f1efe3ba3b252fa3117ed5c208d4371d5f60dcbfb6b1466935c5b6556c1334ad65750512e5253dae7aaafc9565a7f0dd6bd95a4c8e4589912c576e0d260d125ddcee661db95f0379ce95021ce72bce4bf36eb915df561895d7df22cc5b6e361fa804c6fd60516c3239d40e74ec20f60b5e58afb1ac0fb1fec1eb45c0744230755bc039242e13f460e97e196c49491d00412e829ed9d04e95b4c579613f6ac4a7b0c7ef1f8a2cf40595b2d8a6a06861398c9fe37597efe58303e37d292d8d12c8ab11be883d720aa2b45d3965b9e666188ed9dbbb4a02bbd73c6e223dac63f82607066c4e0dcd74f6e8c7b58bf8415c0968b109ac3c89bb4215696caa13d2dc1ccbbd59e8d3d987b723c8f361c721491540296e699bf8cba91e7313395d31c1be48bfd565ef84e0aebf34aa91177396160096fa6e7913587217266ac720a05af43c826fb9220f7f873d197e132cecbb6a8cf23c85043ac70987bb1b583666f2848ef7a58231a552128c5611ef7131e3443fde50ddd9e247c4a80e4b86f40f77125dda9d5abdeaf4d322f028d22bb105d537e57467d7c80ea46ba36b8de537930d617ad7cb2df8f1033528ae4b4c5c8e5758428fa6d519bf5567686bdc20931dd8670d8480209deb5512038cd1ad098dc609084b6f655e99ce0446bc55e1b83bd588e0e3cf51a67d4a99024c43cd52ed7971d03a46b0eb2b0d611a3a5220d44f98afc2965167cc7d8e8c96412748c8978d7ae60978b271fab65955aff498dab3004327e9a20a82e99b16aa79f67c333585a6a8e98ab0a9babadfcdc4fc95d0869b506d03a55ecaa2bf3a50560e6cd341b380aa32c8fcb2d106a642ba48af8221ad4a70bc77ba23edd8886d8d142c7d8451f55ba76c33780e97e842ab7df2a5df58b944f136030780c27f9493b13ef4ece2fba8272ba0378c212a910d4eef3e0ed2b3adf32dc6eb31cd496db042a9b383966c1a80a711368ed8e257f509b9726c365c2f4fe008415be93965ed57fd169e7c3106bf308fe28cad3067c40123dd8ee996422c698359cf834c2db2f5aefec87cf41b7fbdafa04c220012737bae920a9e3160ffc473b4e0b0c039c0daca821dcc3893383e415d5f817209bf7eb45b91429f397e46facd24bf1382bb69db0ee341da1ed323b4b66a15f948d8165a74694c8c02f6f7583590a3828559bd3de1e9ef4c5a19302f1a1cb81896fa79e148f01d60ea931692746a04cf99a48179e89761d6a8da586085dd0c4bab96da55ee2bcd11cac186f12426cdcc82e3c2f188cbefefb3a36a495b89a7e8da5bc45189e919656b51492b2fceb94aa8a42a3baa989bd4f02307588df4b98854b5f6a9ac48028e11acb24c73491b2ef437663b9cc6ac04bd0d19c25005f3e774fce1677438ec56ce617d1b74b5bfad6949ffb229b2b6cf0aa9f42181fe2b26a7aba83d31fc29e7cbd69db690a3715abe5dbfd83ce962e0b117c4ee231a58192c15e16de86a74c9bd2368cc2ca26184fedb6c7832219a4aeaa8d395848b3905cfe89d1216d47c22bdee24da31f0f328358ca57937eddb2cc659a7e2733301cdbcd77a917d8a89a1d2ab810cac98995e69ce334278c66b036a5345889d3ac35a6f9e4d5c2ce8ea89b05ad4eb4a10e3a6c592131d9b73d2760b558220abdef69b817f799378141c5ce3590234fc1ab3f84ed8c897a33d79c3a8245e0c0c26650bf4e143ac5d47e30c9167ed2b46567d170578e2742e0e3d6e257dd02a5b0b315dca723a1c1ae58ff0f5e30021531275888b263bd6445724847dea11b497a5e040aab8392db0fc7664c22860df534f3798e6fa556bb0c868447872f7c4356995d94fb8073234634582209110063a1c43be068412f80c549b8b88fda34b48c9e2d958ffff49f72bb7dc67442c3d6517c756c8b5878bda93d887927b9dc51663f1159bb13b3773d61f4c1c9add5cd333f34b8e87a20cbf49b32cea00ecde5c2e1a930dd8729ed3cb659471b15e12bd4c4e4615d9695c3f7eb3096ce41f8b45600a2c7edbfc9776d80fe56d02adb7c15f517be54ebd6b7d5750766623881c41b4335ae2c8ba0187c0ae5466beb6c27610e5feb0765b2c43cf1e8be6e9c862f842a228bddfcec0affb10082fbc6f045118c7b4319d63b2d7fad533a4603c6baafb0b5fe44f87c5cf6dcc8fe5c715318350e088e4d4e3d3c65cc16697c980fec41cc79c5eed93f1a3b34679e13acf6b1d40988a10b5e3a408e077f29f3a63601c2df3c8bae7eb9730e8ab59fd060927f108774c1348b218fcbdeab2866b75ae2b903e7ef260f2c987f47ba46e20222e7897beaf635b897810d6b6d053d178f0672b5d2f616ff58a772403704042dd1980cdb3196e7a50a4c07e06403d5556e29de6521e3ea2eb8030ab9170f791be418c48884fb92445348551f4d63f04e510fac31d1e536fe03ae607093311e73024b4eb029d19260b32c7f2c418b7bc47440d397b558cfdd288152e58dee6cbc51283ebe967cad0fd5a3472712b6db1ed1ae347b45933bb20dbd6f447c89ca69538865ef34a38bce73b03393164b433c31167e85ce57a2871411ba96952de74f4c7554133dd053151c20fd1117bf7c1651a664eae630c4ac1fe9988d16de5af5bb68281b68efee6ce3ffe657d29440ebaa0cde14911f45c7663157322aceaf74ad8fd6339256957cca381e038f41765f457981e60fe577a9dcddb6668e76173e7a30cbae953a38467f1ef02bf8c7df39e25d373a70c196db457d0785a7d946982bbfa653d1ad3b63eb614093323fc8566d4a57d5e23f0f45bb90aa49e01611c61b854fe1e9b95f56c9f74a933f3440ec59c52cf7e10658bb4eefe3d9735ca05cef4905b8f812ef65a11f6d837b5b2f6571a728e186833b76874324457de2e0b69ae6a44b399a7f116ae33376abdec14c2e6ecb9b9e602f2be7efba18d98136b0639324de70d6bd554b5003a35404c96e7fd09f779e1bcd401f1cd2fe9412856c5b6332e02dff06ffda9f97ecc75de121af6a18de1aade76ac9dadcae562f059303e01be6a2de6e8203ccfe6d9ba766bf60ef5b4ff88030d596066d86a1a2ed6c101a8309881b44b2ea6be5358f811d4d3f3d10073a43b9f2b98ea8a6cac82771b8f2e4abfca54cb86a115bb3ae0d91a07be5c38d43f7bc67fb6ba9fada1541eb3ef6c641cc18f8a6c7c9fc174f1e2da1cd8e3a21d700b9b8fe3c3882974462118466a15e8ec8ab630756d047dd49b10e86cdae269be341a768abd98592f477137d352facdd18c88ebfdc6271a96e3132c6471875306f9882c0cb54c6a8c952c4977c1ef46c30c1e258671bfba45446abf1362ada3640b3e5d79e369191c1c11a96bd8e36f34b2aa3e46743e4b46f31571a8fde787369b214bd4ae4137592c734a9155a4c81a57b5a1afc6df2fa9a6b37aa8265e93e45668294be62949b82f6b334b50299204c954df5941785451eb93f137504693a4cc8649b82f9fc13e977d8b6685978f728b09df19fe67b3a0ab4d27e960676cb416cb3e9c14386815e813f2f521855e4d87486a01a6f383c50748764bfddd62744c2d5847d2f8a8e665ca8d1983dcf5c104638d6ee673049777d446fbca0111f24a3f0e00fdb772123e2ddcd2c2180d4d7462c09a83f0bc45b4ae45ed40b12ecec5e841f69264387ba354db71529022e90c6627a0b5e94fbe8b6ab89c47400fac5ec0fd23b408f5844b135f5f6ef22ed26a654054422b1ecc02632c2be9f15ba2ec2b1e608adc1c69526cb3dbeda1712f27a1df7f0c08ff236def6a374b1f8adb0d16349d5154774304bcfcacf60d6bffb9bb2d39762b69865f17583d32ca0b4ed8cb569c793ac98ca8a14a246553269404ca203326ec159f50a2743ce467425de937977ce4e3daa3f9eb8b29a7da95539c36f7fe72fde2ee81de22e8ba110d514ae0a8c0ea011db29bd85a1e7c965f16bf6ac4069b3bf0cabb49be5e2a07713160200c77f9531f971e8363654679cb76bdc0e013cc38a84b2c45dc290ba6477903e4298b2a31a21054688db2416d82ae592264d1c817562b45b02dbf1370102e749c49eb28df6d85dfa3b122a2202c8a629f465a3831dd809523703a41d8a052ece0e00dec9b4a663d4a468f16b7c2e82bc818e49795630f8c7ed1356330b87aa753ae84cb7695944fb7672c1681e286e932aca65d1b99cbadc3c06f4a9971772e172500929f478597f8733120920ecde90701cadab471cc921a5a381bec99b1b5409ede746e453212ab33d9d1bc819a139ae76e4c048d71676483b1883bceebbbb572ee17bca61249b51983024c25c6b61a39fa493e62f9469d0faa65103b2b9d0922f3965c7a884836a043f5b97a0c3b3f4a0adfbd03bae4367cd3dca32de231ec6d045c344e805f1f3afdae59e3dec16df5d07ebdf6a968cab48b9fa3e1cecba16a47da60fdcbe5c2d9b19c09411492020b306e2d76d55a269f7b23c41276c970a04411aa441bbe620632424f1614c5bd8b740ea8e10f1483279740458688c07dcebb58d001165457f033c58629c4d0def4647e0b2510ff0853be7c263e3157d66650bf429fe4df0d233f51796bebdc7e7b773ba15b59e8c4246d227c34eaf907778ca6f72dc42955f647e99d0bc15384cf9ad77381b3217cd28ee95c879eb0583848c2b357922e541179bee43b88a6e8fef9098142f529a1f25c5d1d8afe921cb6b32512cb0b9a80b164fd8ba43fe5cd3c59efabebcb3abc6384ab38176343d2ac2efeaa60fda67f6024be6206ba1939dadff23f12d05e81f7f51ebbbb3ebf7a3eefe18c709271b2e92111febaa1299fb80573cb3bb905a42103c90d4ab144ae79f4837dc48568bd8bd5e4ff4ad037a9946c7cb9e570518a8b11e899c81a08ff38b5a5a0c93567924578f4c2f3dfbb355f86d2aefb56d6820703a3d5b4ae611aca1d33eb8104c4a02b05de98a090d09e309e928cd325184f377517f1dc48ccbc7c6812760798942f534b14e56460b311fc0f2209f6aa430a8b6988a207b31502198b016d07d16a88a8f900cbe370c15d0e85546c7ef565fec36c13306b699fcbf981885106eafd9cd322ee5bdb740593e78177a6df5d25f4c8dd41873d6980849bb0b824ee0e767e9645313cd22b0e2b30f8337c2bc8622a20e8607d5dc27f9c17e29ca8516c9578050a4134827158f964781e4475b72f815d4e414d1a57aa4c834e51fe5373ffa5e816bd430975e08ea959b18738b8cbe581688912d17cbca4ade0a0cb3a449f9c88297bdc688987fecfa763ac5a22001c2dd51ce681bf81257d29f7c07ad129b043931cf4ea56a06c5b284abac0eb2b542b5ed9f11f6a1170d24238e69881871e8189b42e16a1f648308b00f3751c2bcbb69380ab7e24de81cd44df23205b02333e40ffa", 0x1000}, {&(0x7f0000001180)="209669796368e06d9be37151f3f0d3b4737bdbdd7e4415e02992e14e57f1c37d81b432532e3aaefaf120a05af2346d48b7d108e88957b08a32c3cb26a5d4890fe502f733449d80f7b58fd7f91c8cb82833663f3bb8b1e4a2c8393dfdc9bf5f4ab6e852163efad7b1e87c45217cc33148e0fac999ad9501047e0e64ad9f58d0014d6a662fa4dc99e3", 0x88}, {&(0x7f0000001240)="35ec4b65d489cada8041284ef282c1a3fca8fdcfaa68784a02fb39b98d69781a6e5270b27f3c6eea133e44ecbd4f94d3fd3d787bb5f392af0f5238970854ab40ca057a62ef52a60dea61f3039a8b72a105e14d15713a5ed4efc2e66fa1c12306a137c481f913efdd62bca38ecbe6134bb66747b395a2e08aff3ca8a06dd0946d226b450d7f34c26aa73273b42b704b415bdcfdfddd987d6403aab09599d3a0e3616c1c7d8f45473559", 0xa9}], 0x4, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r1, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r8, r11, 0xffffffffffffffff, r15]}}], 0x50, 0x40}, 0x4000000) wait4(0x0, 0x0, 0x0, 0x0) 15:44:40 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 15:44:40 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:40 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5460, &(0x7f0000000000)) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x4000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000001500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000440)={0x14, r4, 0x300, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x10848) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) r6 = dup2(r1, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) timer_create(0x5, &(0x7f0000000200)={0x0, 0x1e, 0x4674825762ac6b53, @thr={&(0x7f00000004c0)="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", &(0x7f0000000040)="77e752609b93c269fe6b3f50087fa0bbcdadcf08c40d144530198fa4979783cc110a4abd400a9c12d016cd040b46ef2616acd3c988b0ff71f27acae8c7c670fb90d7ab9b416faa6b447096fcd3a886f8ebe8f7da9783ea7f55231dcaf28bcb5eaaf25c9fffa69361e4d6f4a98537c49f8dd618d0b03938a3233eadfe275a61e6046eeba64b40137703e8b6ced2669b18ac0b8fc03689a9fa97eaa66462633c4de717ef935ad32d4d25ebe34079e048f16e92b7b3b0b18cd9687b45e34c1d53bf5ea29c928e860ad6d9bbfaf55ffa3550"}}, &(0x7f0000000280)=0x0) ppoll(&(0x7f0000001540)=[{r0, 0x2084}], 0x1, &(0x7f0000001580)={0x0, 0x989680}, &(0x7f00000015c0)={0x7438493c}, 0x8) timer_settime(r7, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000300)) 15:44:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000200)=r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="34e6fc80187b54df3724d000000012000100000000000000000000000000000000000000000000007de674fae2000000000000000032000c0015000000000007000000"], 0x34}, 0x8, 0x0, 0x0, 0x80}, 0x0) 15:44:41 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x40}, 0x28, 0xfa685f8d78f091b2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22042000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x6}]}, 0x1c}}, 0x4) 15:44:41 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000100)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:44:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='sit0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x405322}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, r4, 0x40d, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001280)={0x18, 0xf, 0x0, {{0x20}, 0x9}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000001c0)=0xfffffffffffffffd) r9 = syz_open_pts(r8, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) r10 = fcntl$dupfd(r7, 0x0, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r11, 0x29, 0x0, 0x0, 0x0) write(r11, &(0x7f00000001c0), 0xfffffef3) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000002240), &(0x7f0000000000)=0x11d4aa717184891f) 15:44:41 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0xa347ba86b2a837a9, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$selinux_context(r7, &(0x7f0000000000)='system_u:object_r:ssh_agent_exec_t:s0\x00', 0x26) open(&(0x7f0000000040)='./file0\x00', 0x100000, 0x100) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0xc0145401, &(0x7f0000000140)=""/6) [ 195.274472] binder: 8508:8515 got reply transaction with no transaction stack [ 195.277750] Dead loop on virtual device ip6_vti0, fix it urgently! 15:44:41 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x101000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "af463118ad7ae4c1a36b742ed2b87e0907dbe593"}, 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) fcntl$dupfd(r4, 0x203, r5) r6 = dup2(r3, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:41 executing program 5: mknod(&(0x7f00000005c0)='./bus\x00', 0x5eef439bff9b86cf, 0xffffffff) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) [ 195.324297] binder: 8508:8515 transaction failed 29201/-71, size 0-0 line 2922 [ 195.333936] binder: undelivered TRANSACTION_ERROR: 29201 15:44:41 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) r14 = fcntl$dupfd(r12, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = accept4$inet(r14, &(0x7f0000001380)={0x2, 0x0, @multicast2}, &(0x7f00000013c0)=0x10, 0x800) sendmsg$unix(r3, &(0x7f0000001480)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)="0f44f366a2a54cd7b237044165241d45c3666bcb00b378e75d1bd96797b6194638b38ed772b6064992fce3f6845fed4eac20782e153218569562e333478bbbfda8b3aa2f36f268", 0x47}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="209669796368e06d9be37151f3f0d3b4737bdbdd7e4415e02992e14e57f1c37d81b432532e3aaefaf120a05af2346d48b7d108e88957b08a32c3cb26a5d4890fe502f733449d80f7b58fd7f91c8cb82833663f3bb8b1e4a2c8393dfdc9bf5f4ab6e852163efad7b1e87c45217cc33148e0fac999ad9501047e0e64ad9f58d0014d6a662fa4dc99e3", 0x88}, {&(0x7f0000001240)="35ec4b65d489cada8041284ef282c1a3fca8fdcfaa68784a02fb39b98d69781a6e5270b27f3c6eea133e44ecbd4f94d3fd3d787bb5f392af0f5238970854ab40ca057a62ef52a60dea61f3039a8b72a105e14d15713a5ed4efc2e66fa1c12306a137c481f913efdd62bca38ecbe6134bb66747b395a2e08aff3ca8a06dd0946d226b450d7f34c26aa73273b42b704b415bdcfdfddd987d6403aab09599d3a0e3616c1c7d8f45473559", 0xa9}], 0x4, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r1, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r8, r11, 0xffffffffffffffff, r15]}}], 0x50, 0x40}, 0x4000000) wait4(0x0, 0x0, 0x0, 0x0) 15:44:41 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0xfff) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) setsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000000)="fa0d0c6de86071fdb1f7ff6d489bd4fb4bf18fd948f2a9e576e1eaebc667dcbd32", 0x21) 15:44:41 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0xa) eventfd2(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000540)) r5 = syz_open_pts(0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000080)=""/11, 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) fcntl$dupfd(r6, 0x0, r7) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = eventfd(0x0) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = eventfd(0x0) fcntl$dupfd(r11, 0x0, r12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = eventfd(0x0) r15 = fcntl$dupfd(r13, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) accept$unix(r15, &(0x7f00000009c0)=@abs, &(0x7f0000000380)=0x6e) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r16, &(0x7f0000000400)=ANY=[@ANYBLOB="7626f582a32cf2417f250500"/22], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r16, 0x0) ioctl$FS_IOC_GETFLAGS(r16, 0x5460, &(0x7f0000000000)) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = eventfd(0x0) fcntl$dupfd(r17, 0x0, r18) fstat(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r20, 0x200004) sendfile(r4, r20, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r20, 0x0, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7fff, 0x4e21, 0x0, 0x7b6ebc8f07842d4b, 0x0, 0x20, 0x41, 0x0, r19}, {0x0, 0x20, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x401}, 0xae, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x1, 0x8000}}, 0xe8) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r21 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000840)="81e6df0538ac3f0514ed4fbebc16e87c1c369ab2da9fd6351a6f6adcc4159243b2d170be390f13762b7c3b8c721ccd69d3cc882349efdf11011b20a6c9abbf2ff544031b710fd50019a11b4b39fee23e9af524ba753e5a2b2f4e2de79f21bf6a4cef90ba6e56ede3b726da9da706f829bf77767a3fe0d5b1817da3714383eb76378b7bf9181f536beef4bec5212e297864e603085ea605ad3b34a4e940e3a360e4a9933b5b07efcafa62d2686ce9f1f9fbc64f322a5d82f3c5b9467b581ba2f76a07eddaa55a37efe47b3bbc5aac5c26b674e3adb53854", 0xd7, 0xfffffffffffffffd) r22 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r22, 0x40c, &(0x7f0000000340)=0x2) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="7c042511ed350f773fd2978d0741216e28cff5b6f7f0e0194d1027f78f4b", 0x1e, r21) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000003c0), 0x4) 15:44:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 15:44:41 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000000)=r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r7}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400ca4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4880) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:41 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:41 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000002180), &(0x7f00000000c0)=0x1b6) [ 195.726161] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=31512 sclass=netlink_xfrm_socket [ 195.755791] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=31512 sclass=netlink_xfrm_socket 15:44:42 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:42 executing program 5: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe2, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="cb2e424093a92eaf9bd70300000085dca06f830ba2d845a9222b5b4af9f9c9961720b47a62a02e37a13724ce5505024a0aa47f2c23b475d541b4866f32936b281508f92bd261517bbf5a1dd82da7a552a79f3b1836f3cc3e8a98898a2804df48d016703a620b5eff93bb5bd306ec0000996d10fc83bf76"], 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x382, 0x4) ftruncate(r6, 0x2007fff) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r7, 0x2081fd) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendfile(r1, r6, 0x0, 0x8000fffffffe) 15:44:42 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/\x04\x00\x00\x00\x92\x8c{\xdcpd2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, 0xa5}, 0xa) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000023c0)=""/4096, 0x18}], 0x3d3) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x80000, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 196.207178] input: syz1 as /devices/virtual/input/input13 15:44:42 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r4, 0x400454cc, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) r14 = fcntl$dupfd(r12, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = accept4$inet(r14, &(0x7f0000001380)={0x2, 0x0, @multicast2}, &(0x7f00000013c0)=0x10, 0x800) sendmsg$unix(r3, &(0x7f0000001480)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)="0f44f366a2a54cd7b237044165241d45c3666bcb00b378e75d1bd96797b6194638b38ed772b6064992fce3f6845fed4eac20782e153218569562e333478bbbfda8b3aa2f36f268", 0x47}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="209669796368e06d9be37151f3f0d3b4737bdbdd7e4415e02992e14e57f1c37d81b432532e3aaefaf120a05af2346d48b7d108e88957b08a32c3cb26a5d4890fe502f733449d80f7b58fd7f91c8cb82833663f3bb8b1e4a2c8393dfdc9bf5f4ab6e852163efad7b1e87c45217cc33148e0fac999ad9501047e0e64ad9f58d0014d6a662fa4dc99e3", 0x88}, {&(0x7f0000001240)="35ec4b65d489cada8041284ef282c1a3fca8fdcfaa68784a02fb39b98d69781a6e5270b27f3c6eea133e44ecbd4f94d3fd3d787bb5f392af0f5238970854ab40ca057a62ef52a60dea61f3039a8b72a105e14d15713a5ed4efc2e66fa1c12306a137c481f913efdd62bca38ecbe6134bb66747b395a2e08aff3ca8a06dd0946d226b450d7f34c26aa73273b42b704b415bdcfdfddd987d6403aab09599d3a0e3616c1c7d8f45473559", 0xa9}], 0x4, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r1, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r8, r11, 0xffffffffffffffff, r15]}}], 0x50, 0x40}, 0x4000000) wait4(0x0, 0x0, 0x0, 0x0) 15:44:42 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:42 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '/dev/snd/timer\x00'}, &(0x7f0000000080)=""/36, 0x24) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000100)="feca114f3fd6c0e17f52bbdf6753ee54", 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0xc0145401, &(0x7f0000001400)) 15:44:42 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 196.353052] audit_printk_skb: 195 callbacks suppressed [ 196.364908] audit: type=1400 audit(1575128682.471:175): avc: denied { create } for pid=8602 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:42 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f00000000c0)='ip6gre0\x00'}) r5 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000280)=""/102399) dup(r0) [ 196.464947] audit: type=1400 audit(1575128682.581:176): avc: denied { create } for pid=8601 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 196.515001] audit: type=1400 audit(1575128682.631:177): avc: denied { create } for pid=8616 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:42 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 196.551345] audit: type=1400 audit(1575128682.671:178): avc: denied { create } for pid=8611 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:42 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 196.642470] audit: type=1400 audit(1575128682.761:179): avc: denied { create } for pid=8616 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:42 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) fcntl$dupfd(r5, 0x0, r6) tee(r4, r6, 0x8, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000000)=""/2) [ 196.725172] audit: type=1400 audit(1575128682.841:180): avc: denied { create } for pid=8634 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 196.762340] audit: type=1400 audit(1575128682.881:181): avc: denied { create } for pid=8634 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 196.797316] audit: type=1400 audit(1575128682.911:182): avc: denied { create } for pid=8627 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 196.829297] audit: type=1400 audit(1575128682.951:183): avc: denied { create } for pid=8630 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:43 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) [ 196.920255] audit: type=1400 audit(1575128683.041:184): avc: denied { create } for pid=8646 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:43 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:43 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 197.085277] input: syz1 as /devices/virtual/input/input14 15:44:43 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000200)={0xa, 0xa, 0x0, 0x1d}, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000240)={0x30, 0x6, 0x0, {0x3, 0x3, 0x7, 0x0, 'mangle\x00'}}, 0x30) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)={0x2, 0x10, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x6000000, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_x_sec_ctx={0x2000000000000297}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x79}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VT_RELDISP(r6, 0x5605) 15:44:43 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:43 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:43 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x844c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:43 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) accept4$inet(r12, &(0x7f0000001380)={0x2, 0x0, @multicast2}, &(0x7f00000013c0)=0x10, 0x800) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:43 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:43 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:43 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:43 executing program 1: r0 = open(0x0, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x2000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_dev$mice(0x0, 0x0, 0x80802) r3 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r2, 0x127b, 0x0) inotify_init() fcntl$setstatus(r3, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r6, &(0x7f00000001c0), 0x8000fffffffe) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000500)) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f0000000400)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r8, &(0x7f00000017c0), 0x333, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000880)) r12 = gettid() r13 = syz_open_procfs(r12, &(0x7f0000000780)='V\xdf\xc0\a\xdf\xf2!\x0f\xbc\r4\x1b\xe8\xe7\x14S\xfc\xf1\x01\xfe5o\xe9\x06\xde\xbdk\xd8\xefF\xdc\x1f\x88\xde\xc3L\xcd\xce\xe6\xa0\x8e\xdcbJ\x8d2,\x8dhF\xf9\xfc\xdd\xa8\x88\xfd\x035\x94\xfb.\xef\x97\xb4\xdb\x87\xf1\xc7\r\xb9\xe4\x91\x92tn\x157\xcbw\xf3\xf5\x98\xc2x\xce\xc3zmH\x1cX\x05\xd4N\xbd\\\fQ\xa4\xd1\x01\xf4\xb4\xe2E\\\x15\xdb\xf3\x11\xe2\xb6\xc9\xfap?T\xdca\x8a\xde\"GAW\xdb\xce\xcc?\x97\xf6\x8b\xc3S\xad\xc16', 0x275a, 0x0) write$P9_RSTAT(r17, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7ffffb, 0x40000000011, r17, 0x0) ioctl$FS_IOC_GETFLAGS(r17, 0x5460, &(0x7f0000000000)) io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r17, &(0x7f0000000540)="5a1d584bbf699e49f977ea853de206f2f992880aec25dc1ebf3047cd60a2302112128f71775354b3afca6564d87e9a4c7983a5246aa09a56d7b58ee1c84f395ae0b6a5fafac596e4c16fe9d3822595d594b86fc6547d77aeede7755190ac79f9bfd4052e35b461c1ead875ec9e8125b2eafdbe7732", 0x75, 0x101, 0x0, 0x1, r14}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f00000005c0)="ad8a441bfb92eb7254e91c9e5a8f7eaab88d927e86da31c81361321650dbb3351d1f9a7ea19c2e8b51a0f541780ac29210429a", 0x33, 0x0, 0x0, 0x2, r16}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x4101, r13, &(0x7f0000000680)="f6777f8aed8e95b527993b5d68171409753e05ffa04668b6a95832b26f62bcb950cb9c184f14e34f6ee68ae5bb74f7d489a343cdb206df43a98fb1635dcc71a437735a10f2b43e89fb921005289a58e18c2c62a0779d77b74f0f2da5d2b16175d56c7176ec2f2ae407edecaf3bce802e8060f5", 0x73, 0x0, 0x0, 0x1, r0}]) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x218302, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r3, r6, 0x0, 0xa5cc554) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r16, 0x107, 0x12, &(0x7f0000000100)={0x800, 0x4dff8868581ae3ea}, 0x4) 15:44:43 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r3, &(0x7f0000000140)=0x20000100000001, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="104988e155d4f3832bbea5fed0e42b47e96e903bdb013e3ea4bde6e1b85110beabc1b8d8dc8d54912934ccb3e9c88ebd0be241bf6f8741f9e1a6f1504fe3e80fbe95320a1093a9e5d9bcb297a8204f0f53657f99fe5cbb558fb4c20fc0f5148fa8b879fe830c5935a308f3e0c0365c5fed3e6309443452fb9b577b96f31da37b957a61d88b70335ac5d6ce7584cdff19e907cd8116947c6af57d725baa8172cc98e694b31b69ad6420163c29c20a5566c463cece94aed34dd1256cad89e0ceb31e", @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={0x108, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37fa2a32}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffff7db, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x41110}, 0x4040000) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x410}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8008004}, 0x40000) r5 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) [ 197.786981] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 197.955851] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:44:44 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x2) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:44 executing program 5: clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5460, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) fcntl$dupfd(r6, 0x0, r7) ppoll(&(0x7f00000003c0), 0x3, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000008) ioctl$TIOCNOTTY(r0, 0x5422) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x80000001, 0x0) write(r9, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_int(r11, 0x29, 0x5, 0x0, 0x0) getpeername$inet6(r9, 0x0, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r12, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) syz_open_pts(r13, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r14, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r14, 0x0) ppoll(&(0x7f00000000c0)=[{r12, 0x22e0}, {r9, 0x8010}, {r13, 0x10031}, {r8, 0x1000}, {r14, 0x4303}, {r10, 0x210}, {r10, 0x80}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={0x6}, 0x8) 15:44:44 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x40502, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='5', 0x1}, {&(0x7f0000000040)="f5c22c1ce191110ee757711bb04425ff8a117eb72333f1b9a10a5647d3e55aad6e66aff17b93457e985349fabcae6bc42eacd7bdb28bf6a2cf382e57fd29f2d2a1eee6d2a6", 0xfffffeb5}], 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="eaaedb1c4b5b4aa7d6cd", 0xa}], 0x1) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getsadinfo={0x14, 0x23, 0x3256cd3848a6e211}, 0x14}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) r11 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:44 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:44 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x2) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:44 executing program 2: fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5460, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x178, 0x24, 0x10, 0x70bd29, 0x25dfdbfe, {0xf}, [@nested={0xf4, 0x3b, [@typed={0xc, 0x42, @u64}, @typed={0x14, 0x19, @ipv6=@rand_addr="d2935c0bfd7d84845a26d72f1e2af9ab"}, @typed={0xd0, 0x6b, @binary="26b73e550fcd7ddb07ba81cd8e044588597ec53568628f3a11cfb8b5130f3de5fb44687dfbd1361ed4512ac7004ec282654b1c27e6b3ac8a7233d1d8bee4fc47cebd288d549b188e90be3a3ec2ce453b3144997c2d20ecbb5d8f8a6338b322139c4a61c9f6ee0ce9667b862eebe1086a7ee5f19e789945c44de0e3a6ba099e6adbd5de030e2a5354df1e1dee671220cf31f3680325a433ed84c06581b36db3292dc1d90753da62dc8e73ea505cdeec1e4817c1d5012553e209db602d3075772f18fb108797d701bdf0"}]}, @nested={0x70, 0x3, [@generic="a38ebf45926e2a6fe6e32ada4c90132e63763f55911fb5d990534711b4edc57f4c6375bd19b28d4ce8dbc7684fd4b908c9f154c952b88ad5875cb57556386e9294228e9897d114a269a21bad0c6e6a841f387388b54eefc367c57ce95ffbb4e4e32bd6", @typed={0x8, 0x32, @fd=r3}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = creat(0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000180)) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) write$P9_RSTAT(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x0, 0x0) sendfile(r4, r7, 0x0, 0x9001) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) [ 198.341904] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket 15:44:44 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9f2bbf7b3ddd56f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010002d0b0000000000ae070003000000bb93eab70ca5a7775ca087a583974fb8443f41a1efde5afb3e7ea6a13f2961b12e9a7396bd"], 0x1}, 0x1, 0x0, 0x0, 0x84}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d2dd15b6210d53eed59bc0080000033270c6a98d91c22def1125d7b1e82e4541039a85ad8b91cea336a1b57f45a0788e3aba04551e4a522e15c7ce71553059a5ef83c2ab06a52fcfce7c467c7e6260464a4770e41f0fa8ae7891e", 0x106}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/mls\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000a40)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8082}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000280)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="4ca6bc9c2afeb3520bff42996ee19034e8fb2c9af9ea2d952f281f82d2682e274c3e443a3d36b54083ee09b8a27f19a6a317d8651702c4afa590a663ca", 0x3d}, {&(0x7f0000000440)="685e48b022b9f249ec96f25881f4fb4e9bd1aac045b70e25ca97853f215c7002e07f514a47d704c336cdd074a5393a5f6c471e8c0d6a6af3990a37a1c3b6e95f04e69657f9578a73f730cc8ede1fdad0442b09b9153aaca7279ebb80f8ed63c25d413f9e8c0648308ea100c5174d3c08e2794e1c44fdc8a44ca3940e4aad57d8b74b974a33ce5abae8bdd4f16d2c93b3a894e7253c0ad29b75a41478c4820155477fadebf605c9a9cd1051e36214ee7d96", 0xb1}, {&(0x7f0000000500)="03608ef7eb8c11b9ffb72008ee069be72e0cb4a368e7e56fb2902a02bf501f70df94c1c8438d83e3160eefef9035938c2763b62287354b0ff093b3d586d2f808b01c9ff48c", 0x45}, {&(0x7f0000000580)="d1bd2bcee85c89455b2317f82ce668d659326314347f75c294d0ddd5e11609f43f2918a6e62104ada6d0dded5642afaabc85ba5a822b749cc75a6334171902ffce0299cc70cf2939e7e9d2f39c907b26f07a4a50484232124cb2c2c8f688134365ada819fb837b5bc14b7dfc265b2af152ab26821620939c6f3132d2ea01addd04251f82424683b7d63619a1f646c5f69df8cd3d47019ad61b762c2353", 0x9d}, {&(0x7f0000000640)="3a62168ddaa457c6e6bfd72b870ec400b3096b5c6afe9ba9db8be44715a3325ccd11ef0bc9f15f0c1cd07b21c3e28faf6152cb4e2788865d8a3b9c8f81bb59078e36ac963f3f075050ab0fcd147f4d1bc1a61ad528ff7937e00486d31ae1783dceebcc9741e5b244055b8b", 0x6b}], 0x5, &(0x7f0000000740)=[{0xd0, 0x7, 0x9, "6f7ce18c0d70afbaf01c9fc14822e9d523af78d5d05d00a113bcfd98d4660d1675c58113eaac0699c666b1d37d9ae62321d2a47fe7a93ce34934413cab98788442f4463a7b2bb3ae91f254cb3efbaf5ee9e1953861fb43eba644c012d0704894ab9a4b4ec3ad0602676bdb7374f5689fba7553173e858bc961d39122412ab2ab2de888ad8658d123de58942da5e923531fc7128a15325ab8e35d6c019266fec9438fbcee16cbc99da99c27af24bb73e8166949a90919d285170ea40ae475"}, {0xb0, 0x0, 0x0, "bfd2b92be4f6854d55acc63322e9542a2665435a2246847228f7119dc2fb6255d5eb703da9ae53e36cc4db52bc6863aca62bb5a59453771e77098530e84d31b356a8b64b319c9b94a3de2e72b6103000da61fb34831166775807c687c4c0ed3535a0e4614ef6ed426285b515c6c033d891ce16cd72712772bfbfa361aab592996d8e906453a4c55fec194d799e90603324538724a914dcc567dd"}, {0xd0, 0x10b, 0x1ff, "c78a435657d0081e2f3276043235d7a80d82a2b94355b00bf55bf39aba7af435c6432754d803f8d6a11455f0a546f06de0ab67632dbf332e2ede343f1fb87e8f8d5af334e1671499e2ea31460c59e1f6a57596f46d6fc98c5c1908cee5db23866b0e8b4e8dd22af572843495ee2f570749be82c1e7284aafc3f982ed4b03314dce933629ab1b091e6560f07ec6fc22f1c4f716c891ec42c832550bb3478620b51659ad266ad7fb3774ba39b333f2e7c11d56eeab6d651e4d506f072ab1a7"}], 0x250}, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) 15:44:44 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x2) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:44 executing program 1: r0 = creat(&(0x7f0000000380)='./file0\x00', 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x8, 0x4) rmdir(0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000440)={0x9, {{0xa, 0x4e22, 0x6c, @rand_addr="63086ae442d50f3f98be18ebd920bc3b", 0x4}}}, 0x88) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x4, 0x4) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="041021fdc56196a283ffb9b76c45d1c52b418b72c603"], 0x16, 0x3) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) clock_nanosleep(0x3, 0x0, 0x0, 0x0) ftruncate(r3, 0x7fff) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000500)) sendfile(r2, r3, 0x0, 0x8040fffffffd) 15:44:44 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:44 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.Ypu/syz1\x00', 0x200002, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0) accept4$inet6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80000) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x3, 'ifb0\x00', {0x2}, 0xc610}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x2) r5 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:44 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:44 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:47 executing program 5: pipe(&(0x7f0000000040)) clone(0x22004efc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) write$P9_RSTAT(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) exit(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x16}, @empty}, 0x8) sendfile(r4, r0, 0x0, 0x1fb) 15:44:47 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x33, 0x0, @thr={&(0x7f0000000000)="0c8951fc5ffc3afc78aed167370fc46d75432968fc1b7b942c7f95e79636b5e70f1456012be20e23e27154b49ce7302b2aad513c750623a58cb1e8ca1d700d7743d130a51804e5c2e4bdbe0b1422e2440df16c88e32886123980c439ed712b266aed2a53ae42d6eb156c83d543b5f31de64d3bfa215582b70a8c20038a607cca900b619611593a61a67f3d80b1b64685ce33e4783466d0", &(0x7f00000000c0)="480fc12a57abeaeb318957f4283e966d19347eb6f134ffbe68"}}, &(0x7f0000000140)) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:47 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:47 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) fcntl$dupfd(r10, 0x0, r11) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:47 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) memfd_create(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KIOCSOUND(r5, 0x4b2f, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="05b3d8f3293b06184caf0540254970299f87ac63fadb2f65730e7c10a32b8fc2ce26768f85a71865"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) sendfile(r6, r3, 0x0, 0x800) [ 201.518827] audit_printk_skb: 105 callbacks suppressed [ 201.531685] audit: type=1400 audit(1575128687.641:220): avc: denied { create } for pid=8828 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 201.565297] audit: type=1400 audit(1575128687.681:221): avc: denied { create } for pid=8828 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 201.566193] audit: type=1400 audit(1575128687.681:222): avc: denied { create } for pid=8826 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) [ 201.584532] audit: type=1400 audit(1575128687.681:223): avc: denied { create } for pid=8825 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:47 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 201.676291] audit: type=1400 audit(1575128687.791:224): avc: denied { create } for pid=8851 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3ff) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = eventfd(0x0) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$dupfd(r1, 0x406, r10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = eventfd(0x0) r13 = fcntl$dupfd(r11, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write$FUSE_GETXATTR(r13, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000080)={r6, r7/1000+10000}, 0x10) 15:44:47 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 201.705526] audit: type=1400 audit(1575128687.821:225): avc: denied { create } for pid=8851 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x3, 0x4a, "df2f8039d4ac6ef9da3fdfae86aeac514f453d157a252edd8a6a621bb7882126e627851414e5162a465205123e27d73c3c52531ee8d122b9070bf62d9e0132eea6381bbea0eb208b8af5"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_pts(r5, 0x8000) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000000c0)="d75fffa6981b1e5f968235daa15939337747902f0a7de5e434a65023cba2dfa10b2812ea880a63050f9c5545a6c12585e860c09d78af0cf38182da10d6907cb5d591b9d02fa61a8682d736d42f755318a56d3d7318221fc9330852aeeaa00b4a6a37e1565178250ba1337e864a") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup2(r2, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) [ 201.767688] audit: type=1400 audit(1575128687.891:226): avc: denied { create } for pid=8853 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 201.777550] audit: type=1400 audit(1575128687.891:227): avc: denied { create } for pid=8857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 201.865720] audit: type=1400 audit(1575128687.981:228): avc: denied { create } for pid=8866 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:48 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 201.898693] audit: type=1400 audit(1575128688.021:229): avc: denied { create } for pid=8859 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:48 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2, 0x84) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x500b2490}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x8, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1fc37d9abd468ade}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xd4, r1, 0x1c, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xca}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x20044850) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x7fff, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) fcntl$dupfd(r5, 0x0, r6) ftruncate(r5, 0x280000) io_destroy(r4) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 15:44:48 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) fcntl$dupfd(r10, 0x0, r11) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:48 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/45) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x144, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @mcast1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @remote, 0x10001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xc002}, 0x4000) r10 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x9, 0xf5c2}, @mss={0x2, 0x9}], 0x2) 15:44:48 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x220) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000040)) 15:44:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x200101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) fcntl$dupfd(r5, 0x0, r6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x4000}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x100}, 0xb) 15:44:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e20, @multicast2}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="b4"], 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x80, 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r9, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x5460, &(0x7f0000000000)) r13 = openat$cgroup_ro(r9, &(0x7f0000000280)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r13, &(0x7f0000000480)=ANY=[@ANYBLOB='q'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r13, 0x0) ioctl$FS_IOC_GETFLAGS(r13, 0x5460, &(0x7f0000000000)) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = eventfd(0x0) r16 = fcntl$dupfd(r14, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) renameat(r13, &(0x7f0000000080)='./file0\x00', r16, &(0x7f00000000c0)='./file0\x00') ioctl$BLKBSZGET(r13, 0x80081270, &(0x7f0000000000)) 15:44:48 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x7f}, 0x28, 0x2) r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) fcntl$dupfd(r3, 0x0, r4) fchdir(r3) 15:44:48 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x469, 0x20, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:44:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x50, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000000c0)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) fcntl$dupfd(r5, 0x0, r6) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5460, &(0x7f0000000040)) r7 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000000)=""/7) 15:44:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)) shutdown(r0, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:44:49 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:49 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:49 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:49 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x4, 0x2, 0xe3, 0x4, 0x0, 0x6, 0x48, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x1000, 0x2, 0x8000, 0x0, 0x9, 0xfffffff7, 0x3}, 0xffffffffffffffff, 0x0, r3, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0xd7fd3b855584b5cf}) eventfd(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, r9) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r2, 0x92833000) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x26) ptrace$cont(0x18, r11, 0x2, 0x9) r12 = gettid() r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = eventfd(0x0) r15 = fcntl$dupfd(r13, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$TUNSETLINK(r15, 0x400454cd, 0x1) ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x26) ptrace$setregs(0x7, r12, 0xffffffff, &(0x7f0000000280)="c29c70a2e962b0185daaca38c227413abb69686730e5b265513f178ca15c3f7d68bbf8b871a2498a7af09813365d4c0df99dc2c3363b167105df42a82b0e75941b9135541b3092953bf1f465c95cb83e468388a0aea0a0e6bd58b67ffade26d5a0607c9c9b05553ea6688fcaeb288125") ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) inotify_init1(0x800) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000000)=0xbe3) futex(&(0x7f0000000100), 0x8c, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x1) 15:44:49 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x0, 0x8000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket(0x200000100000011, 0x0, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="962c85e043d8"}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r6, r0) sendfile(r4, r5, 0x0, 0x80000001) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) creat(&(0x7f0000000480)='./bus\x00', 0x0) r7 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x202, 0x0) r8 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) close(r8) getpeername$packet(r8, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r7, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r9, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x5460, &(0x7f0000000000)) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0xdd) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 15:44:49 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="04876dff"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5460, &(0x7f0000000000)) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000040)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001a80)={0x0, @in={0x2, 0x4e20, @loopback}, @xdp={0x2c, 0x0, 0x0, 0x3d}, @generic={0x2, "e59dd2c7f966ef3774f64d15f70b"}, 0xffff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001a40)='ip_vti0\x00', 0x0, 0x100000000, 0x83b0}) sendto(r2, &(0x7f00000004c0)="b7e4cc16ba47ff6ad608f2194789d6efcdfd81901a7d116e37a47dff1ea09c8a5f9e0ad17b4164dc27ba2c44ae5e82e863fcaab980e1f98709abc879cce8ff7524f92e949e939a9311bd21e35d07ecfd632c79c77a2301df5ce12dd9e9c41c84ee1c19c78f7b54e8daa8082192e7753893cd9525d0b91b429708773e5f771d93b6d73087bad3396422b8cc78266fa6386bcbf43cd7cd72998bf6acfb8a98b938e5209ef7dc5aeb5c4412a4001f55a0b8f55307bb83ff768c67d7edfa5e27a6c5b0134f69c97f66eda8017d27a00c", 0xce, 0xc028040, &(0x7f0000001b00)=@can={0x1d, r6}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) fcntl$dupfd(r7, 0x0, r8) readv(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}], 0x3) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) fcntl$dupfd(r9, 0x0, r10) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r10, 0xc0506617, &(0x7f0000000380)={{0x2, 0x0, @reserved="425b3b1bc83ef0eaa4b36975979ae8ae3844f41f1b89e5a01eb5017900892d4a"}, 0xe3, [], "92633dfc881a50160ee244244ecdba8f255fc6751364b9eb1cc6c60897f1b966336b71c5da0fc5f4415c765f079e5f1533f74e32d4e2a9e8a9dd7de1758ab1a60cc4c02e67cbabda706128234e0b732f87c21fe328a28b114df30f925496291535fce0083fd17f2cf7dc2e127f71c491cc9062e6726bf2837d4be0ae7bda20ff23dc2ecddb1cd1a4ca7586e543a466ff9d74e237c3bc5c0f6c23edbeda2902fdb238d4926b4b1434e727ab75ff5cef7f93adc3ad879748df6bd993cd4f396203f3d1270cea7c4f5530c5d0a1ec7768822d452f5664768a35a2f51db451883c57a3c858"}) 15:44:49 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:49 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:49 executing program 5: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r0 = open(0x0, 0x475100, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x74e171633be57c1b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) fcntl$dupfd(r4, 0x0, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="85"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) fcntl$dupfd(r7, 0x0, r8) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) fcntl$dupfd(r10, 0x0, r11) io_submit(r1, 0x4, &(0x7f0000000640)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000100)="11c8958d128d3ad9314466ea6bb0537ff206d1523b0c896b07b28ea8137174551ff9936f36f68e8a77cb061b4c0b64bfdd07a19393855ef9c76677e48f99cae430f8399b5d7b1a0b1acf272bd027c49c5bf9b27fd4df15e02b89c12b9e30bd35282e0ed5e7bcb8462bdb965d83d7870f237cfb88f69e989a130aee11b03688b4ec70c4b0419bb3611dc1a2aa63043dbc09a99a53cb7fe9427d4c2dc362a26114a058d4c89d87849b0f5cb715cc504044a35d3f729d9cc4bb8edc9afbb130afc05a212b11e5cf1e44fa5e02f8760a37", 0xcf, 0x7, 0x0, 0x2, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000240)="2fcbffe1c09f31774468d6d6b53507873543f2683a4c57d44797cf8bd25d388be81e1395dde3e6103218ebe60a9a9bc8919ce7a412f1bb859c28ef076a1618462bdb7f4ebf9528f8f5a39d7384bc00bce5ca17f3630138f5401e2074077549ecfc94b1a2470d41bdbfb4bb50300a1827db89d61c5a7415f977fa71aa7312989b9d1927fe4bb55107a5520024aa3577cf6dd4a6590e24a93d238f321f9afda69fd530e40b94c02e579ef8e0a8b9b5aea4a27aee1ced3d0b202923f212d98a27e3a19e51191bec44422e5da07964523cb63460b57404bc4d25cf5eb32f2e31fed396f43f2da9ec08603c71d3f9cb3c88f1497e6c", 0xf3, 0x80000000, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x3ff, r0, &(0x7f0000000740)="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", 0x1000, 0xa214, 0x0, 0x2, r8}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x1, r9, &(0x7f0000000500)="6e73118d070ffee91236f0108e79b485de0a75dbca035342a3a3d1ad52455e7bc5af269978e1ab8cfe945c376c640de85fbc6dbc3355b22022294aa25778124a1cf79affe376b328569db3f3a5927a7c13fb8f4a3072c362538321e5241c489e381dddb3f609e80166786133ddbba8b062666c1524cedda7681f468c4a02d71fe24343670156ee20d3b06a1ee6147e5f83671e06c5a4d3e3706631e836d3c282b945479052d28caa2f391db7eb83e506d3b71186ac9ce8dd6b0734379ed11dfa72756835bfd5fad405a3a94fe645b850c209aa331ea1ffaa4f858b563baf49db4d92e8c110a06d6b64a016bec57a", 0xee, 0x6, 0x0, 0x55b773941057bb94, r11}]) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r12) r13 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) fcntl$setstatus(r13, 0x4, 0x6100) fcntl$getflags(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r13, 0x0, 0x2) sendfile(r13, r14, 0x0, 0x8000fffffffe) writev(r13, &(0x7f0000000800), 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r15, 0x29, 0x0, &(0x7f0000001fde), 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r13, r14, 0x0, 0xa5cc554) 15:44:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f0000000140)='selinux:eth0\x82\x00', 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) setsockopt$inet6_int(r8, 0x29, 0x43, &(0x7f0000000180)=0xfffffffe, 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="0000000000e0bdb6030000000000000002000000b9000000070000000000000000000000070000000000000000120000e6ff0000020000000000000000002b791e29000000000000fdfffffbffffffff82cc498500000000000000000000400000f7180100000000000000000000000000000000000000000000000000000000000000ffff770000000000010001000000400000060000000000000000000004000000000000000000000000000008000000000000000c0000000000000000000000000000000000000000000000000000000000000000001f0000000000000000020000000000000000000045000000000000000000003cdb800000000000000000000000000089001100000000007f000000000000000500000000000000000000200000000000000000000000000001010000000400000200000000000000d7000020000000004597056ad4eb07e7c2c5bcf1caf8258bca028bb509953f5799cbfdda9745af613f96baa2eb0291d05eb291a998084f6315412eeede054f606c4eec83843993b880409b572c32cf483d45165c87312c844eba724c90c8b2b896ccdefcac5b8d52fead585a000000006fadcf7420a284e11c58417b4095ae7c73cdccba0468c926622f706b1a10a50d158b8b2a83724db0c7e927c0bf4d4801b1d686fc469a313046c87415ed7e27687f8425f9135bd7d07cf192a15f9ba839fd8d5dc51b0a40cbc46d899147b04db95ac845736c21298cd5544461ca766d96b883d61043d4b6a1881e7fa8c0aa2bd337a86ff7c08139314bfab8dd473586d85526025ea59f1bbd49ff502e501f051285d8ce3e29930f07d34f16d95893f73c51111265db411e00"/630]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 15:44:50 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:50 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:50 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:50 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x101180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:50 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480), &(0x7f0000000180)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) sched_setparam(r5, &(0x7f0000000140)) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x11) fcntl$setstatus(r6, 0x4, 0x6100) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe}, 0x50) clone(0x2142001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x11000490) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x9) r7 = socket(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000380)={{0x833711922102f19, 0x0, @identifier="6647ec192e374877e8979c737742f11e"}}) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000010000000000000000000000f0000000000deb746ddcfd157530461b34b58cf3c374071ca438e6e3afd8439ceaa646cbd80ccf7a19ad46cbbd0b53f2d996bce24d167ff8403bf247b3a40a794051fc3ab037987800937a86392feff44d49bda969af207b5eafdebc79e73e28b478f8c005fb7d87e0200000000000000a931ce168de2aefab2f6a72dcb0ba1546624ca19eff1884507c121e59db1e1429bbf8e01c785097a47d76287ad9a0978728c41db894c9919078abbfee0c487176b8202943fe7dce196d4e4a0e0f73c507d443ff45ca7d17418b727000000000000000000"]) ioctl$RNDGETENTCNT(r8, 0x80045200, &(0x7f0000000340)) gettid() r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/sockcreate\x00&\xa0\xd1\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe(\xe7\xe6\xce\xd0n\x83\x8d\xee\x00\x8cF\xdf\x84|vA\xc8\xe6\r:\\\x1d.\xdb\x1e\x1am\xd4]\b\v0\xd4\f') write$selinux_context(r9, &(0x7f00000004c0)='sys\x89\x00\xab\xe8\x00\x00u:obje\xa4\xfc-5ct_r:semanage_ck_|:s0\nXd\x13)\xf5\x849D\xbf\xac\x06!y\x94\xb4\x89F\x81\xe8\x1c\xecz\xd9\x82\xc4\x9aj\xda\xdcZ\x81\x1f\xc3\nz,q\x9c#$\x1c\x9e\x02\xf2\x94\xf1~\x9d\x06\x15\xb1\xd3:t\xd4}a\x87{\xe1\xae3\x1b\x9a\xcbF\xdd\x11\f\x99\xf2U\xbfD\x8b\x95rIR]\"y)\'B\xe9#|\xbe\b`\xe9Dk\xf9~\xe8]\xc4\x16\xc3\xf7a\xd8\x97~\xf8\xfb\x93T\xb2\xcc\x7f\x05J\x81b\xfd\xee\xd9\x94q\'\xb0\x11V\x9cw\xa1\x064\xa2\x1c\xd8\xf3+\xcd\x88]\xd2\xd8\xc6\xe4B\xf6\rB\xd9p\xfa\xcc \xda\x9d\xb6\xeb2\x8f\x851\xe3\"Bd\xe14\xc9\x87\"\xe6\xcan\xa3%\xd5tw\xb2T\xfc\xd7\x1e0W\'\xa5\xa5\r', 0xe5) accept4$unix(r1, 0x0, &(0x7f0000000000), 0x800) write$smack_current(r9, &(0x7f0000000240), 0x2b) r10 = open(&(0x7f0000022ff6)='./control\x00', 0x20000, 0x0) mkdirat(r10, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 15:44:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0xaaed3aeaabbb13fd, @in=@dev, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x703000, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5460, &(0x7f0000000000)) select(0x40, &(0x7f0000000100)={0x0, 0x2, 0x6a, 0x8, 0x8, 0x754, 0x5, 0x17}, &(0x7f00000002c0)={0x25c, 0x401, 0xff, 0x5c7, 0x0, 0x6, 0x7fffffff, 0xa831}, &(0x7f0000000300)={0x1, 0x3, 0x4, 0x1, 0x47, 0x4, 0x81, 0xfffffffffffffffa}, &(0x7f0000000340)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000000c0)) 15:44:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="80764447034d817f0f9b74a36ae1a3cec65f46e695783b0cef4063ae8e28ab6b90f21c9b26b6520294b573fbc422da09d3370a7be5ab3fa7cdc22c1626e763637be5a17a1f88022ff9aaf5828069c962e3885625cc8c8a56b0f24d5b88273d6575c8dcdad4fc4c6b715354101d2bb388e9ea141cf11acc13184688dc2cbe0bc0bb91f4f68dee5617ee68cc9e5435334fefa310f483516b92b8838dd66b90a2d9c534718bc1dae45037fcdfd7b2460bc86426fd7cfcdb4a", 0xb7}], 0x2, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x11, 0xa, 0x9) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) poll(&(0x7f0000000040), 0x0, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) renameat2(r6, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x1) 15:44:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) pipe2(&(0x7f0000000500), 0x84000) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lgetxattr(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580)=@random={'os2.', 'keyringppp0securitymime_type\x00'}, &(0x7f00000006c0)=""/4096, 0x1000) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000000)=0x3bc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0xe1e9, 0x9d, 0x16, 0xfff9}, 0xb, [0x5, 0xffff, 0xe4c3, 0x6, 0x0, 0x7f, 0xffff, 0x9, 0x8, 0x3f, 0x8000, 0xfffffbff, 0xfffffffc, 0x0, 0xffffffff, 0x2, 0x3, 0x7f, 0x1f, 0x2, 0xffff, 0x5, 0xf8d, 0xfffffffd, 0x80000000, 0x3, 0x3, 0x5, 0x8, 0x3, 0xfff, 0x4, 0x7, 0x8, 0x2, 0xfffffff9, 0x1, 0x6, 0x9, 0x5, 0x1, 0x0, 0x6, 0x8000, 0x5, 0x800, 0x186, 0x400, 0x3, 0x5, 0x2, 0x9, 0x100, 0x7745, 0x5, 0x400, 0x0, 0x100, 0x7ff, 0x3, 0x7fff, 0x80, 0x0, 0x5], [0x9, 0xffffffff, 0xfff, 0x2, 0x0, 0x9a50, 0x3, 0x9b6, 0x20, 0x3f, 0x6, 0x101, 0x7, 0x7, 0x80000000, 0x1, 0x1, 0x2, 0x1f, 0x3, 0x7fffffff, 0x1, 0xfffffff9, 0x3, 0x3ff, 0x3, 0x8, 0x0, 0x2, 0x5, 0x3, 0x3, 0x2, 0x8, 0x1, 0x0, 0x16d, 0x5, 0xfff, 0x418, 0x2, 0x0, 0x8, 0xe8, 0xdb57, 0x1000, 0x10000, 0x9, 0x2, 0x4, 0x2, 0x80000000, 0x7fffffff, 0xffffbd23, 0x8, 0x4c70, 0x8, 0xaf7, 0x9, 0x10001, 0x8, 0x0, 0x3, 0xff], [0xfb, 0x81, 0x5, 0x8, 0x9, 0x4, 0xffffffe0, 0x9, 0x8, 0x9, 0x8, 0x1, 0x0, 0x4, 0xfffffbff, 0x200000, 0x7, 0x7, 0x101, 0x7fff, 0x200, 0xffffffff, 0x7, 0x3e25, 0x14ce, 0x0, 0x5, 0x800, 0x6, 0x3, 0x8, 0x400, 0x8, 0x1, 0x306d, 0x4c, 0x9, 0x341, 0x6, 0x0, 0x1, 0x80000001, 0x81, 0x0, 0x6, 0x4, 0x80000000, 0x7, 0x103, 0x1, 0x0, 0x8001, 0x0, 0xfff, 0x4, 0xfff, 0xfa8, 0x3, 0xdb47, 0x401, 0x800, 0x4, 0x1, 0x80000001], [0x427, 0x80, 0x4, 0x3, 0x7, 0x9, 0x9, 0x1, 0x2, 0xffff409a, 0x3, 0x800, 0x9, 0x1, 0xff, 0x5, 0x5, 0x5, 0x281, 0x3, 0x0, 0x6, 0xfffffff9, 0x20, 0x8001, 0x8, 0x2, 0x9, 0x3, 0x2, 0x6, 0xffffffff, 0x4, 0x4, 0x20, 0x1, 0x7ff, 0x7fffffff, 0x0, 0x6, 0x7be, 0x7f, 0x1, 0x1ff, 0x4, 0x12bc288a, 0x101, 0x7, 0x8000, 0x3, 0x4, 0x80, 0xed9, 0xffff, 0x6, 0x1, 0x5, 0x0, 0x7fff, 0x8cc, 0x7fff, 0x3, 0x6, 0x1]}, 0x45c) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) 15:44:50 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:50 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:50 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:51 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:51 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:51 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:51 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:44:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0xfeff, 0xfffffeff, 0x3, 0x3, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:52 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) open(0x0, 0x1, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) inotify_init() openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a0241, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "e4ad5b423da218ba", "49b7c352262eae148e28658fe2859d303d7d2cb871feb28e4a2a930556f7a7ce", "fcdd776f", "2fd153f6f068a5de"}, 0xffffff3c) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) fcntl$getflags(r1, 0x3) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000540)="aa4df0f8a800bfa140dd426d051f763a5dffe0737aa612e5c035b055b8121033beecca529d45a0ef296dd208f9520c80fbd0bcff32487fbbd85acbcd9dce62b146bc78702125ba61bd1fc19aac4709473daca61d403df0d8940047157950ae6c026de88b6e19d11acd436d2c753f13c632bcb26ab6b417682bf5d160d9ee914eafee3c2ef0ac86050bd65d65c457521c795da0054e6fb90b421f336a6c6a125e80cd1e06668714e9620b2e6289f51d86", 0xb0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r6 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x10d000, 0x0) read$FUSE(r8, &(0x7f0000002200), 0xffffffda) sendfile(r3, r6, &(0x7f0000000040), 0x8000fffffffe) r9 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) 15:44:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6, 0x5, 0x5, 0xe2, 0x0, 0x81, 0x12a001, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xa43, 0x2, @perf_config_ext={0x3df, 0x6}, 0x80, 0x5, 0x7996b3c7, 0x0, 0xfff, 0xdea8c083}, 0x0, 0x2, r3, 0x2) vmsplice(r4, &(0x7f0000000000), 0x312, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 15:44:52 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0xfffffffffffffec9}, 0x1, 0x0, 0x0, 0x840c0}, 0x1090) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r3, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') ftruncate(r7, 0x7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="a33450f7b7b5ea4ac3d9a02a805e0b32d6d1fbd9995b0f6e36a000bbd1b5debd44a2380d0d"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) 15:44:52 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) fcntl$dupfd(r7, 0x0, r8) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$session_to_parent(0x12) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/d\x00', 0x0, 0x105301) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000000)=""/13) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) write$ppp(r7, &(0x7f0000000280)="caf144993956f7f0d1d28566a7bf7878cd5a25dfd0c3f77881e8bb438842695f48693b27b81dade096353f58e32d24e1477959cbf6eb546ac1fa1fa4ae8e49d9aca0107345b3b34903", 0x49) fcntl$dupfd(r4, 0x406, r0) fsetxattr$security_capability(r5, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0xfffffc00}]}, 0xc, 0x1) 15:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) fcntl$dupfd(r7, 0x0, r8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc8000910}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x24044080) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:52 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) fcntl$dupfd(r7, 0x0, r8) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:52 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:52 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x38, 0xffffffffffffffff, 0xfff, 0x9) tkill(r1, 0x26) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x1d, 0x4, 0x3, 0x0, 0x10001, 0x800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000140), 0x5}, 0x4081, 0x39b, 0x7f, 0x0, 0x7, 0x1, 0x8000}, r1, 0xc, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) [ 206.601740] audit_printk_skb: 171 callbacks suppressed 15:44:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000600)) r10 = syz_open_pts(r9, 0x0) read(r10, &(0x7f0000000080)=""/11, 0xb) fstat(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r12, 0x200004) sendfile(r7, r12, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r12, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c070000150000842abd7000fedbdf000000000000000001ac1414bb0000ce0000000000000000004e2100004e20000700008000a2000000", @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="b4030000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r6, r11}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000380)={0x4, 0x1f, 0x0, 0x12000000, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0xffffff2d, 0x22}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timerfd_gettime(r2, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x7fffffffffffebb, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r13, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) [ 206.634600] audit: type=1400 audit(1575128692.721:287): avc: denied { create } for pid=9157 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 206.729093] audit: type=1400 audit(1575128692.851:288): avc: denied { create } for pid=9160 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 206.821663] audit: type=1400 audit(1575128692.941:289): avc: denied { create } for pid=9174 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 [ 206.879853] audit: type=1400 audit(1575128693.001:290): avc: denied { create } for pid=9174 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:53 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r5}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @xdp={0x2c, 0x2, r5, 0x27}, @sco={0x1f, {0x0, 0x0, 0x9, 0x7f, 0x0, 0x40}}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x9, 0x0, 0x0, 0x0, 0xc9f, &(0x7f0000000340)='bond0\x00', 0x2c43, 0x80, 0x9}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000980)=0x7ff, 0x4) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f00000001c0), 0x4) recvmmsg(r7, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) fchdir(r6) r8 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r8, 0x10, 0x0) inotify_init() socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x7) writev(r9, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) read(r10, &(0x7f0000000200)=""/250, 0x50c7e5e2) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r12, &(0x7f0000000400)=ANY=[@ANYBLOB="4430afb9b58f0b6fabc4dcdfe612123c6325f32105"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r12, 0x0) ioctl$FS_IOC_GETFLAGS(r12, 0x5460, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r12, 0x0, 0x26, &(0x7f0000000040)={@rand_addr, @rand_addr, @multicast2}, &(0x7f0000000100)=0xc) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), 0x4) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) 15:44:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x149042, 0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0xedf1d44) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$FUSE_WRITE(r6, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r1, 0x4, 0x6100) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r7, &(0x7f0000007e00), 0x40000000000025d, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x100, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 15:44:53 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) r4 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:53 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 207.070665] audit: type=1400 audit(1575128693.191:291): avc: denied { create } for pid=9186 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 207.135025] audit: type=1400 audit(1575128693.251:292): avc: denied { create } for pid=9186 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 207.220504] audit: type=1400 audit(1575128693.341:293): avc: denied { create } for pid=9188 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 207.252012] Dead loop on virtual device ip6_vti0, fix it urgently! 15:44:53 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x100100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r1, r3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ioprio_set$pid(0x2, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) [ 207.268910] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.309714] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.327435] audit: type=1400 audit(1575128693.451:294): avc: denied { create } for pid=9201 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:53 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x3f46, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 207.358955] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.397263] Dead loop on virtual device ip6_vti0, fix it urgently! 15:44:53 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) fcntl$dupfd(r7, 0x0, r8) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) [ 207.441079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.467791] audit: type=1400 audit(1575128693.591:295): avc: denied { create } for pid=9201 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:53 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000000)=""/249, &(0x7f0000000140)=0xf9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0xc0145401, &(0x7f0000000180)=""/14) [ 207.567985] audit: type=1400 audit(1575128693.691:296): avc: denied { create } for pid=9174 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 15:44:53 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$unix(r2, &(0x7f0000000040)=""/252, 0xfc, 0x20, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:54 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) open(0x0, 0x475100, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0xffffffffffffffe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="072c1fb5ee415fd908429e9757bd25e49444e22afe2cc6d10dbb75b00146d915d5eeec29af419f866c789a1dd1107840f5226011a4c236d1a0f3d4411208e97891e83f460c33ce14d985b9fd5a6e5986e9faee22e96df6e90d055124695366ac1786e9b824610efad69a618b9bf2e236a81356b7d379d8f3ff0aafa43cdf5cab97226891d154a3b68dc7dd", 0x8b}], 0x1) r6 = memfd_create(&(0x7f00000003c0)='u', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl(r6, 0x8912, &(0x7f0000000080)="0a5cc80700") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/628]) memfd_create(&(0x7f0000000040)='u', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) [ 208.247809] Dead loop on virtual device ip6_vti0, fix it urgently! 15:44:54 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$inet(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) eventfd2(0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) eventfd2(0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') clone(0x888304fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="b40186f2fce7800f05"], 0x9}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$cont(0x7, r1, 0x0, 0x0) 15:44:55 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000040)=""/10) 15:44:55 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x10040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xff) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:55 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x6}}, 0xd) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)=""/102400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) fcntl$dupfd(r4, 0x0, r5) ioctl(r5, 0x4, &(0x7f00000000c0)="ca64024b0892b265bd5b8108271c8bba622f5043e65aaf75f68d157239464666ad166e6f2c1c14f58861230670c4b1d4c98d0fbf914b688152b309f156567e444bbd4ed99daf885758954234be56e7e7635d8e92d8160393ad2de8701685a1e891c04a1d10ea208dc6ec56d5267be58096a4d7f22638425f97c1b8dfdbb868a23e69522d297097e9f36dab0fae9d751a0444b85094103596ac90ba6473e7acb62af2af18") 15:44:55 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x0, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5460, &(0x7f0000000000)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e20, 0xe7, @ipv4={[], [], @local}}}}, 0x88) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 15:44:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5460, &(0x7f0000000000)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xe, 0x6211, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa2148}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x73d61af9, 0x3ff, 0x2, 0x80000000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r1, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) fcntl$dupfd(r4, 0x0, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) fcntl$dupfd(r6, 0x0, r7) r8 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) 15:44:55 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x0, 0x1, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x26) wait4(r3, &(0x7f0000000000), 0x20000000, &(0x7f00000001c0)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010f059522c9cb"], 0x8}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 15:44:55 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:55 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x0, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:55 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4000, 0x200100) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) write$P9_RREADDIR(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0xdb) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl(r1, 0x4, &(0x7f00000001c0)="11dca5f3968646f24cd9055e0bcfec7be070") setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0xfff, 0x4) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000807fe4)={0xa, 0x4e22}, 0xfffffddc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000c14, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/111, 0x6f, 0x1, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @empty}, 0x717000) request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', 0xffffffffffffffff) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r5, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b5bae", 0x7}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) keyctl$invalidate(0x15, 0x0) sendto$inet(r0, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) shutdown(r0, 0x1) 15:44:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, "7055d1c83a1f2ea91f235ef82ce53d69ba2ae26f84a939f4af46587a5155fa816cd5567bb82481b282fc060de050b92057d61409a4743b71bc6bbc1215ba3d08e61b385843f897b38cd6b551f88c0bc54f8e3c088faf99cac925d8331cc1731c4506ab972868bc332fb0add357919994aa8cb493223165db861ce899a126d7f72ff2d1bb340532b5670dcad83d201137ea190885a995bac32d545d62b8e2daee75db5e39f3e1c3ea58a0af903395d30d735c332a59dd54c39f7b92dab70122c22fe94cf003fabbefaa839575478dcafa36048d7113bb9f4eb48fefc9391b8717f30c57d16960f9f1a9f1c21468067a249ff11fd592918ce1395090f46c37d48045e155e2a079a57974c0176b1219a185870f9322c83c4e3be8c36a63ae2dc4a81b8b72c5f51388acebd917d5eaf9250ef04cf75dc124cf05aca21b4f2846ee8d988ad59ca2619d982d646856a10630fff9e506e16234a1c1c53bcdef4dab1aa19959a18d9f83959f3479cfcf9bc7afb76237034dcf518d73518deae6b98b2fea9912d76091c80596b4fbc2cab0217c3b5705550bdf92317ad1944b3d8e8c2c8d71396e9eb002b20540c9e852feb196995f4d8b9d943be851d7c65ffd808aa08d59e26802e4c8bff26646b775bcb0ff0aa3ef5308d5bdd664cf1bac5c91df146a1e4a41e16316c8d09fefa4a2b7e4a69fd4bc1d825966e258a1a816a1a25995628f9cfe0ce0dc3e1609f05b5aff71d6fa042734ea964de2e8998a59455d0f0f08b0836b4e830a750fe45c8fbdb93d3b83e311a302b64b78c83d47a7b4bd5c04ac64af7df9b25197780b74aae8b10f06843be20761204b95e51a3ae711cc5462a055cbad400090dec0e42434fad48b14d4cb7cc92636d97745e58cf3202495481c8db8b3bb7250031070589aca3673ac86c1ae1b7cd4cc39c102700dd785ee296356905d98047646bd5187e544c999517c1cad42fe4d4acc7b2b19fd051372cddb9f0ae5b306516f18018599b78e1a1f4b1a0e758a3349a4460e4fdf589b93a72efd74ab880e08723e719af3ea7da216fe8327cfeb761ddaf524fd515d8491d31c7a32f610631d513bf950384937756708bfc2c658ea349fde919ccb125b213305e4501838e5513c8c6b2effa0d32709460d3df47e0922582a9ed425c9d941552e8f3ae30c62b03d21b9ff5c0fba3780a49d83840f8b3f33d0c99c69171f86904b6590c4a8dbc5c409a632a6f92b6ed9eab0e8ed757d4fcbc6834e88e227983330603e41be39bf85631efd62de1a49a33869841674e04156b0b28ba7c31025004411974abdde716566256bc7aedeb5ed23485d71c0cda5380bf91f7633f0e43bebd6be3ae282e3ea01f5fae898ccc32a3013a358b40594c4c0a5ec6c5342bd04b95df26e065238e05841d019907a17cfff3453808a1a408244d2bdd78177aa308838f2c580ed29221abf0d4f500e1a2b326a06d08b4c4c6e2902584db9d4d803c0ea27c4aa20a9270625491187c35a2cd7f53759eef5bcb60ca7188b907fe89128904f1f5795d2f3f8194276ddad7fe029ebacbd3d734408dfc9d0a1fe68509910409c9065ebca553cc124f66988f68194729a7b5af5bdad5d93007803083a778a6d1c377180f35eb023130c4120621b16420340f80ab187c2abc6b1203b1ff608e8e67ec9c678ba62255d7359d316a93b2619f86a0873577fa10c7c9402415642eef69d7251ab651c302e194bbf05b906679fe471bbfa29cf8ee81b0d2d15dfb7e8c65ecb0509a4341940b7a3c6ee44c667786f42d38cf9e2c94ea89e7ea47b258f92ec840160fdd4cbb801a11bc8264c357af012cbbaa44d34bd1263c3dcf6cb3d4fbad7dcbc6470ae9b0fdcd3f3241ece60b2f8f4c4f0365505a1ad1b6b892a4ca1c067f667fa27a79b03083396e6154f603a96756fc717f56ba0fb6f819c5a5ce1bd205ac580012f0219d974cf5859d306f47a9a8ba8e7d98c37528bbcfc65e48ad261ac324a198c93a04b2b128084c8629a4194d81dfd8448dce5827691ab51260fa2a848d341c207d66c57bbc3948c6df50908f94983fe8e7493df63620fccebc1d42fcd7cfdb14705a702dc2b072bdc6b1bc11c72e96bb81140e4f3351945a85e1d30405d48ccf1c73557d14d483cff3b3f0d5bb957c0c004c7c9c633555db1364db439f21f4d90fd86546cc7c4820052b929396cf7f342ecf18556b4fc0a705c73f6b5bc99481d55df26ee0c096e9604bf6ba17d095c1bee529ad8ac81113c670531d41d32066f951cc5ea6abd7dcc2bdaa779accde47f1c7ab2641e1f0715e028bf988a872545bcae169ab306612d6c0a6dc9ee825a7dbbeeb17890438097b11524c192ce30eb14fbacb893f29d3e79c71d623ff23217232033bc3b11d4e7ba2f1387d1373ffa268a6563a07c580e6383e7b0279c1163063ebcf1cc04301cd2e1d35e360ba8f5f8fc8961f8d5a94846b791dd2b10fe294b0ee279669823624deb0e20cc95fd77fa31a3000a771c86a169ceb803080e7e1102544dda362ebbc802b7c7bddeb4331ad7de73025a6e561c3ec10bb8932bc92400c7abafb6ba2072a3658f559c250c8dabf63e5d1b9cefe2186d20844a82632a83f406a6f4cfcc6209c810d5964a13beb441de9e14fa807f3a912bb6e780af0d14c0400ffa4f69502d3ba54d7786e6203743d9b0549af828abe363e6be4438a8808a0c65f1561b0448c6d1399d1e695a8ee1d5965fa43390a6da14f7e7d3d2982f6636e2e0935da56f2f188ae68d352057b71ad28b710f7e2f9fdb9fc7a3dff6960b01befc5d152fbe4868b2579f2b3c7b0e154b9f0b25976c6c7c451098e04783b885c6dd607ba9f2eadcf7b7a49f75762163fe2efbbea3e1c42c1d51ded95c7da834ab5b9d2c2949b2a1f9c510e4ea69be18e266a324c4d1fc004bbb6d28c6f93b4182cf45302b4c0c3e096adb317127dcf2b2da93253b34c0d778c155364d719f2c58a3c4fb0c1359cb68513b4a998155414ee2f40b0c6f64826795564edb877b7434fcc630ce3373834a03787e366281870492faa2227a66a79c41b972d8a68ef7d6bbc5f76b1e619ffd2edb9a17cf6e9615d4875adb6fe943db95b80dbcf4668e57a89c0b38c27bf847fe5769ee5d19d0f35facbf384de8dbe56f66a9b0d3bbd639d9a051373dc72962c40c5f8e0c31bf081f2ac9209c8737ea0cd55a19edf49e59cc37bc3abb2eff4b76fbacdbf43b4c77631bd943c75529ce29cfc7bfa9335c74d216b5eeb66995645d4c0564c1e048b0036901af11f9d93e0a281723a75a8a1c12837605982f320bf3b06525505b33162b188be8bc2a374f0794264053a1438bd63de0114a548d6d75385068f071a9a375296564dbcb5cd377d04c4ceecf2f787d9ebc0dc43721601bc97125bafa7ecfa352e26f903e2c1776cd9d7efd0d303ebeb36d458709bc44c14e471ecfe5eb1373aaa70fd93ee6ea8092061d0bd5148be5a1e964a380bfd925a977c2fdd305a251281b46caed31dfc7ad647eae9e29ca42c8fdec73f236536b5586e1f3ad6c2bd4d2c8fd1ba1aee7a7fcb5df181897b05e3a2e12e76dc1d408762fe9fbc38bfefdffc76314d025e71e4993db412a1e2c0ac1c04873dfdf105b5eef1f77c405e7e5e194e58d91085c073c429b70c39e450e1999bff879ac31dd35659232bca52927371ae272157542a3d4f8e9ded5211076a7c27ed29921eef3a60a9d61b69f728694e0c2d67772de4b4f95cd10241d0441a152ae177dc422e45cbab50b06b1961ba1638e09c583ddcd44906b61fb7c4e14d47e2f7bce4897f3a83ec45af0bf0bd1e4efa2065f817d9af89bb8bdfb3d8ed76eb7ba68a4a73725ca2b88724d23f77ff0ad59c925e755307384ff3d7208016982f74eba4d38355846e3c6ff36a2bbc5e4eb77521b8f770cde2d2c6fea8327f0cb3de75fbb9fdcc34114844eaf2e6b38b9159efb2b48578d163224508a1a339a09388ade0d17243e8837f1f5111d7dd9c9f90e304ec44e76050fc3da4dfddf873719d2adb7f4cc6967cb4fcd2fcbbe6fd83935472f64b906384e5386d0167160e472d6107160ec3e50afec252b4d852b4feb89d4fc674abebb66b3d0bd2a71883c83972b6bdbcf2a51b356ae58d5206e425164a8f0bbce4bfb7f61109623c41a91a6fcbd3cd0778e3269e0c69411a866a0bd3a59b31d4f2c19e892669e7c9648b2f639f793ccf7b5ea608b2a669eb2b83dd39285c5781e0772171957a2c5a1963cfe7190ea86031ea1993ef9bc41ab544bf2878de765af03f6c4e1d43074616e332a73810f6050c553fcfd115afdf6d297da162545a51f6fc95e1f59633b130c211eb91ebb046d0005d82ff7552d6c5cb54f027710eddfd1a206e68f1edc6046d6b56d0066a230a4fde602704678d1b14f3534735b9e9cc91e47e46764e02af89eea21a308046d2f35214a1612ce1371284787a636587f35d12cf01643575847ec975e68b30dc3a9addade77d6a410531d21112834c8e30c6ded241a4d9ee43a080149dd54229904b08eb11eb6c04bfc35741911337f744b861c48b5e7a58750281f8fd37aa211f636b74a490510032b2974ccb0697118464ab870b0486bdf540aebea0f4ae75c7ac22823200939e142f9ca083613c85347ae0dfa39760a5580d27b6e56d57e585742bb1fd2933c46465dd530d2038cfb48610cbaf84fe9d5658a5143bbcc7dcbe99b51d16d7d5bbb04b97ae7df051035e1850416a1ff5796ee53040a50b0464525b569061c32daa145314e088990deae0ed22955edf46e699cef3694ef123862dddda2959396cf18e40e3ce64cec5f9183625972d43145681da9b22694be5a96086dc2210134c0312140fac8ad2d0283c8b871b52b75b62c476cefcec81d00314ad7bcba53e50b0dbc743d4879420e28d2530315823428212f6f0b858a721fbdc5fa734173036dd1d73bb1f38c3bc560cc5cea88077476993faec0a0388c389c6afaa166c98568da21a56f94dbcb193357fa2439b944ce5373e9f58844078a5786b18fd38f4b1f70f63d0dd4217425aa7240d521bd4e2a85f83c97ccc39ffa42e6a9ed37219702a112391cd70833eb853d00b4a973331ef1f8032b0bd265092fd77ac3fed2e3ababe1e1db92f1b55f493be9973e37919449d56fa4cf17e9e1a4020bcf3bb0ebeb410077065cd99431a72b3cfdfcf9cfa9dc3902c85aa251595f975b9251c7019ea11e6dab2a36819d2c390f535240de950607d7aefb2e4f5ea681aebbe1fba447677c7ca0622967b9ca5092bb241e331003aba795e0507daf3e5ef49d1a2751489a4a77f6b2bce2f2548ef1ea8a84cb5bb4bd6e9a1aa799fe6e0ea63a625eac84c9b661bfe9d4006f4509571fbbb4676aa3e323ef4ce9fd651de3e6ac42f07a8fcb89e80307bbc47cd5dea2fa45ba34d3709916cde14fc3851ce1298a1e26cd5155af6c09483635b8418d9e199d7f8d7756acfe232c21f08f65476623d5b2ad1461eac20b621f9ab950dee474fd75dd382b7e5d4f32676f0eb68cf60969d274d7daa7aaa077d2a4e429050ec6c78b99c150cb52bac129565f1b427c0d6b79548aae96b4eaa760b3863be49b7134511e978df52277fcda7cc7c2e2a31570841b80da3856e0378b0cfe6d78ab04a8d66a0de457b310907561c997a8f2284fbaee4cf412e88ee1ccb00e32a0b866724c6cba6544fd9d8b701779fac25112ecbf45fc7df4b8364748a91dc6277f5b66d714d9cc36a52f8707d532ba1cc51172a1bf752617206b688ef7263770e7fb2f77199bbe3a", 0x1000}, 0x1006) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000080)={'rau@\x00', 0x5e, "00000000000000c71b9786a024133c54f203223151e98887fd825fc6fe24df8df08ee76bfc0ced0b4aad8a28b70bc90b049e2583e15395b3ac68432016982ef1fcf5672bfc5bbbe14239c0a973cc53558f0ebe3af6188ef056653f915cce"}, &(0x7f0000000040)=0x82) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:55 executing program 1: socket$inet(0x10, 0x80003, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\x00\x00\x06\x00\x006\x00', 0x200000, 0x0) fsync(r0) socket(0x11, 0x6, 0x13) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000700)=""/146) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000007c0)=""/2) r9 = syz_open_pts(r8, 0x101000) ioctl$KDSKBSENT(r9, 0x4b49, &(0x7f00000006c0)="401039566f155b6b43a937e17dbd526a0c5217a81f3dd1445d7578") fcntl$dupfd(r1, 0x0, r2) write$binfmt_aout(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x67e) 15:44:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x657, 0x4, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xa, 0x2c, 0x9, 0xf, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x1000, @local, 0xffffffff}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @broadcast}, 0xcd7}}, @sadb_address={0x5, 0x5, 0xff, 0x60, 0x0, @in6={0xa, 0x4e23, 0xfd5, @empty, 0x7fff}}]}, 0x78}}, 0x4000) r6 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400140, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000040)='wlan1\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', {}, 0x48}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) keyctl$get_persistent(0x3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 209.871525] input: syz1 as /devices/virtual/input/input15 [ 209.989353] input: syz1 as /devices/virtual/input/input16 15:44:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@window, @sack_perm], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_opts(r3, 0x29, 0x1, &(0x7f00000001c0)=ANY=[], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xfffffffffffffec2) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000100)="2600000022004701050007000200e8ff06f10101c7033500b06e6b256e", 0x6f) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x10000007ffe, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f000077f000), 0x2b9) sendto(r4, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144aff0ae9", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x800}) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x2000}, 0x1c) r7 = dup2(r6, r6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x6}, @timestamp, @sack_perm, @sack_perm, @mss], 0x13274e) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="000202002cba4314ee880000310000000000000000000100b49f0dda81e96fb27dd51695912cb63f17b376c5cd3555b5cfb7c83e2d601a5f9c48fba7ea0b2eb66e9eaee3a33d9b3461a80ebd5db3c02f643ee6a3862cb433a133ed2a7982ec789d84419bb8e5bcbf651f481ab4056b509f515178f1f5ae95103c60c1"], 0x1) fcntl$setstatus(r7, 0x4, 0x2000) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) r8 = syz_open_procfs(0x0, 0x0) sendfile(r8, r8, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) write(r5, &(0x7f0000000140)="f3fbd2e58ffbc7bba0679c67fdcd14c4ac2ca59d13f3dea78d6eed67dd8f4381b16d21d186082ea9033a58f1f07f15bacab07e295bf99c00efb43b36dda8b3c81e83786c1021f6feedb7f749", 0x4c) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) poll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x420}, {r5, 0x1060}, {0xffffffffffffffff, 0x8}, {r5}], 0x5, 0xfffffffffffffffb) r9 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:44:56 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:56 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x0, 0x7fff, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:56 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:56 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="03"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:56 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0577b16bb391506ba047e764afc9b2fbf99cdaf11caa20eed77682c6069d019db588bcbc2cb9f1f21e533722b59232b9f84a825bb59a09d112821d77ac73d697db30fe8881662b6e094c6a09528c70a78fc314ec48287db11f6a201bb10b3e1ee3596b57e75e37d7aac753498696fee47ad8e492c14045a8a65b0d5d5398222da81b73b320ff67ca6c671c6e07d8a89f409df5df663b09c75ae943ab809e3eaf4cd646ed8f"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000000)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) write$cgroup_type(r6, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r6, r7, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB="2cac13e91d102867726f75705f69643d", @ANYRESDEC=r8, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r9, @ANYRESDEC, @ANYBLOB="2801"]) write$FUSE_ENTRY(r3, &(0x7f0000000540)={0x90, 0x0, 0x5, {0x6, 0x0, 0x4, 0x100000001, 0x4, 0x5, {0x6, 0x1, 0x838, 0x2f2, 0x3, 0x40, 0x400, 0x48e, 0x9, 0xffffffff, 0x5, r5, r8, 0x3, 0x1}}}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$UHID_INPUT2(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = eventfd(0x0) r15 = fcntl$dupfd(r13, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r15, 0x80404532, &(0x7f0000000280)=""/241) r16 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:56 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x0, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x3, 0xfffffffffffffcef) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000300)={r2, 0x0, 0x3, 0x14, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x20, 0x5, &(0x7f0000001440)=""/4096, &(0x7f0000000240)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x2}) r5 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8932, &(0x7f0000000100)={'syz_tun\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f5800fe01b2a4a280930a06000000a84599910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x86, 0x401}]}, 0xc, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e21, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x66, {0x2, 0x4e20, @loopback}, '\x00\a\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000045ddf58abe526559e71349bb3e0c1e910a0b2b410d8bec09c518daa78d35f30c90e303b4f01fcf00242209a92af1d85b4c1fb6b134ace2b235d9b743b6cd4c0bb324bcf475ada427bcf2ed2cce34d097410593e8bbefdd1f214f34f19782a946903fc082a3429559e77dcc5b052b8245ce4d81c63abb3b8f6febbc87997d70d7e224444e62c1b789528ab9af252ed1ac758fee2a30a1bf323fbf91f9052e", @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf2510000000e7ff05002c000200080003000000000008000400400000000800010001000000080001002000000008000100010000004c00020008000200060000007e000400010000000800030005000000000635aeddee7a0cd80004000800000008000400000000000800030007010000080003003f0000000800040005000000280004000c00010073797a30000000000c00010073797a31000000000c00010073797a3000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000800}, 0x40c) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[]}, 0x1, 0x0, 0x0, 0x194}, 0x20008010) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x40000, 0x5}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r9 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r9, 0x4000b) sendfile(r0, r5, 0x0, 0x7fff0) 15:44:56 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x184, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x582}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe02b}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e2}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x53080000}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc4a}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x44020000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) 15:44:56 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x0, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:56 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x140002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000001400)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) accept$unix(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000200)="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") 15:44:56 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x43, 0x2}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xff\xff\xff\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x17\x00'}) pipe(&(0x7f0000000640)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {0x0, 0x12, 0x3, 0x100}, 0x38, [0x5, 0x7, 0xaf25, 0x1, 0x1, 0x7, 0x34, 0x9, 0x500000, 0x8, 0x7f, 0x3, 0x0, 0x2, 0x2, 0x200, 0x7f, 0x26800, 0x6, 0xffffffff, 0x1, 0x1, 0x0, 0x10000, 0x5, 0x6, 0x1, 0x1, 0x4, 0x7, 0x3, 0x3, 0x81, 0x4, 0x6, 0x8001, 0x80000000, 0xffffffff, 0x152, 0xc93d, 0x7ff, 0x1, 0x4, 0x9039, 0x8, 0x4, 0x157c, 0x2, 0x734, 0xfffffffa, 0x8, 0xd, 0x6, 0x0, 0x26, 0x3, 0x1, 0x1, 0xa77, 0x4, 0x3, 0x0, 0x1318, 0x7], [0x1, 0x2, 0x53e, 0x2, 0x80, 0x80000000, 0x3f, 0x2b, 0x6, 0x7fffffff, 0x7, 0x8001, 0x2, 0x7f, 0x2, 0x42, 0x3f, 0x8001, 0x8, 0x7fff, 0x5, 0x0, 0xffff0001, 0x6, 0x1, 0x9c95, 0x10001, 0x1, 0x0, 0xfffffffa, 0x9, 0x1, 0x5, 0x7, 0x3, 0x7, 0x8, 0x40, 0x3, 0x1ff, 0x81, 0x7, 0x4, 0x8, 0x8000, 0x3ff, 0x3, 0x7, 0xd65a, 0x1, 0x0, 0x80, 0x4, 0x2, 0x6, 0x0, 0x9, 0x8, 0x1, 0x5, 0x3, 0x6, 0xffff, 0x200], [0x0, 0x1, 0x6, 0xffff8001, 0xe9f, 0x400, 0xfffffffc, 0x5, 0x7, 0x4, 0x6f84, 0x4, 0x10000, 0x1272bf5, 0x8, 0x2, 0x5, 0x2, 0x7f, 0x3000000, 0x727, 0x7, 0x7, 0x1edd, 0x7fff, 0x6, 0x7f, 0x10001, 0x7fffffff, 0x2, 0x9, 0x2, 0x0, 0x0, 0x7, 0x81, 0x100, 0xba9, 0x2, 0x6, 0xfffff8e6, 0x9, 0x6, 0x4, 0x1, 0x3ff, 0x4, 0x4, 0x2, 0x20000, 0x0, 0xfffffffe, 0x6, 0x81af, 0x7, 0x0, 0x5, 0x41, 0x4, 0x2, 0x8, 0x3, 0x6, 0x7f], [0x7, 0x5, 0x20, 0x7, 0x4, 0x10001, 0x5, 0x3, 0x5, 0x101, 0x5, 0x9, 0x200, 0x7fffffff, 0x5, 0xdd58, 0x3, 0x20, 0x80000000, 0x4, 0x800, 0xffc7, 0x1, 0x5, 0x10000, 0x9, 0x1a, 0x9, 0x49d, 0x0, 0xda2, 0xfff, 0xbc3, 0x7, 0x4, 0x6, 0x0, 0x1000, 0x6b69, 0x6, 0x2, 0x1, 0x5, 0x5, 0x3ff, 0x6, 0x1, 0xff, 0x7, 0x4, 0x59ac, 0x3f, 0xb35d, 0xe9e5, 0x401, 0x80000001, 0x1000, 0xcb7, 0x9, 0x101, 0x1, 0x8000000, 0x7fff, 0x3]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x6, 0x1) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x2f, 0x15, 0x8, 0xd, 0x2, 0x0, 0x2, 0x16d}) splice(r0, 0x0, r3, 0x0, 0x63a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000704ab092506090007000aab08000600000002002593210001", 0x1f) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 210.802903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.809468] IPv6: NLM_F_CREATE should be set when creating new route [ 210.816141] IPv6: NLM_F_CREATE should be set when creating new route [ 210.823603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.830135] IPv6: NLM_F_CREATE should be set when creating new route [ 210.837501] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.856915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 15:44:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x6d, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000800000000000763044000000000116348404703000000000000000000000000000000000000000000000000000000000000ddcc350fc0ec552f651cb1b1181eb610c35465b304458c493f8b11c6b2ee0b08dc86fc2aa18978d28d0d3490e32a2348d9680e4d106619ea585ff7b0127eb4a0c8f3a7eb323a121110a3622f5809225d93757df234a699662893481aa09210590e2a0a99acffda411338db2be8882fcb0de026a02957e80db01e5a345e48931f3b6413b5c9b871a42dbdf031f914aeef574fa47a368993fe61e711509cac6841fe6c45"], 0x0, 0x0, 0x0}) 15:44:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) ftruncate(r1, 0x208200) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x24000000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[@ANYBLOB="81be6470ed545b73bffc2df53e5a48ecb3a609f87e4cda3be78831a37faab95c065c8664d2d243946d9f077edf71560d55ca4602c2e063129c4b7393b342a7500a1fce623fc3d1ea8cc5db9e6d5c4c0d32dc1ea19ff692a60ef32da89bc9", @ANYRES16=r6, @ANYBLOB="08002cbd7000fcdbdf2506000000100001006e65746f657673696d000000100002006e657464657673696d30000008000300030000000800040001000000100001006e657464657673696d000000100002006e657464657673696d300000040002000000100001006e657464657673696d000000100002006e657464657673696d30000008000300030000000800040200000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080004000200"/202], 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendfile(r1, r2, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:44:57 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x0, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) [ 210.955120] binder: 9430:9432 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 210.968555] binder: 9430:9432 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 210.993767] binder: 9430:9432 DecRefs 0 refcount change on invalid ref 0 ret -22 15:44:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r3, &(0x7f0000000140)=0x20000100000001, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="104988e155d4f3832bbea5fed0e42b47e96e903bdb013e3ea4bde6e1b85110beabc1b8d8dc8d54912934ccb3e9c88ebd0be241bf6f8741f9e1a6f1504fe3e80fbe95320a1093a9e5d9bcb297a8204f0f53657f99fe5cbb558fb4c20fc0f5148fa8b879fe830c5935a308f3e0c0365c5fed3e6309443452fb9b577b96f31da37b957a61d88b70335ac5d6ce7584cdff19e907cd8116947c6af57d725baa8172cc98e694b31b69ad6420163c29c20a5566c463cece94aed34dd1256cad89e0ceb31e", @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={0x108, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37fa2a32}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffff7db, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x41110}, 0x4040000) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0x84, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe82}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdf6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) fcntl$dupfd(r5, 0x0, r6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r6], 0x2}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) r9 = getpgrp(0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x238, 0x34, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12}, [@typed={0x18, 0x14, @str='mime_type$em0em1+/[\x00'}, @generic="fd2141c357f47f6005e429e0e9684f1829ac4cd1a132642c8c9fdf1ada87669547e8f53b6c417ce021b304e9dd0003a53503dba8a2bba71cd535e1338958cc7df178af037df4c3467d4034c53aa8fca356e78333821033c83e6f1ff893a9167f7800d1ec2b9c37f602edac9aad0d22a47f71e7c8e8f123825c319f5c3181afa85642d4985df58d6e8c6a6cabca5fe59c0b5c3be493219a50367d3905aab1f58323918654ae7fdbfa277a7c22208e31095b9827940f67a3fdc42aaca4e410ca9562cb1c4827ef2ad58704e0948f6a5915a3939aed", @nested={0xc, 0x73, [@typed={0x8, 0x4a, @u32=0x4}]}, @typed={0x70, 0x60, @binary="922b2f4d383682768b33dfc8d6878ca6a946d1e641f758a3802abce79043e7cc6dcbb3789d4d899193c519b0073a886e8480a48c44fda591f15c45744d7be29f184e0da0e65408690a97ededf216f180c1a900fbbb257f227f0aa35ece2832ac8e206d00b9d9efd3eb04"}, @nested={0xbc, 0x31, [@typed={0x8, 0x6e, @pid}, @typed={0x8, 0x19, @pid=r9}, @generic="db025e27c75b308edb690cb1b7fa43e218ec2f90e2bde2090197b3", @typed={0x4, 0x36}, @generic="7e1065a718e78608ae9241ad2e7819fcc6bf18822edd48ab884afb96a43e992d7e4080c2a6e650da698272922ede0e0e879a36e9023d5d107e11517c5a0600c07c31209f67a5a043d11d8bc8940c5d26528956d2f5e841d7dd7d271c8fe2707fd33e62c0443d5383cd41cdabf1b45d47495bae01a0322496eda438966641b83605b45988fdc94b5545"]}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000005c0)={0x8, &(0x7f0000000240)=[{0x9, 0xf6, 0x9, 0x7}, {0xe539, 0x4, 0x1, 0xde5}, {0x4, 0x2, 0x0, 0x4}, {0x2, 0x0, 0x5, 0x3f}, {0xfffa, 0x5, 0x2, 0x8001}, {0x0, 0x6, 0x1, 0xf35c}, {0x642a, 0x6, 0x9, 0x7fffffff}, {0x20, 0x6, 0x7, 0x800}]}) sendmmsg(r7, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 15:44:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe2(&(0x7f0000000080), 0x800) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x6d, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000800000000000763044000000000116348404703000000000000000000000000000000000000000000000000000000000000ddcc350fc0ec552f651cb1b1181eb610c35465b304458c493f8b11c6b2ee0b08dc86fc2aa18978d28d0d3490e32a2348d9680e4d106619ea585ff7b0127eb4a0c8f3a7eb323a121110a3622f5809225d93757df234a699662893481aa09210590e2a0a99acffda411338db2be8882fcb0de026a02957e80db01e5a345e48931f3b6413b5c9b871a42dbdf031f914aeef574fa47a368993fe61e711509cac6841fe6c45"], 0x0, 0x0, 0x0}) [ 211.004672] binder: 9430:9432 got transaction to invalid handle [ 211.013119] binder: 9430:9432 transaction failed 29201/-22, size 3410892602436078813-1204183041777409125 line 3014 [ 211.028374] binder: undelivered TRANSACTION_ERROR: 29201 15:44:57 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 211.092980] binder: 9444:9446 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 211.105105] binder: 9444:9446 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 211.113270] binder: 9444:9446 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.121676] binder: 9444:9446 got transaction to invalid handle [ 211.128360] binder: 9444:9446 transaction failed 29201/-22, size 3410892602436078813-1204183041777409125 line 3014 15:44:57 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x0, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 5: gettid() r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) write(r2, &(0x7f0000000040), 0xfffffffffffffcbe) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) socket$inet6(0xa, 0x2, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x100, 0x105082) fcntl$setstatus(r3, 0x4, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="2b7818af73a0fa46ee8cd283e255c71a906029684d756fa9ec1a0a88419ad1d5fcab8d438389ca8e9697715b7a25a78d5e034a1e52cd9f325ff1b667a6abe546345223c52946a2c1a2be724136919778cbce26fe52d1a65893404963a4cdb611261906b53b8ec56e85ae5ba15f642443b69db83f6d9ecb8cfce5ef4070a2"], 0x6) sendfile(r4, r3, 0x0, 0x80003) [ 211.168308] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.185066] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:44:57 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x0, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./bus/file0\x00', r5, &(0x7f0000000100)='./bus\x00', 0x5) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x8000, 0x0) fcntl$getown(r9, 0x9) fcntl$setstatus(r8, 0x4, 0x6100) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) creat(&(0x7f00000005c0)='./bus\x00', 0x0) 15:44:57 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:57 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:58 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x0, 0x8}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:58 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 211.899079] audit_printk_skb: 159 callbacks suppressed [ 211.904675] audit: type=1400 audit(1575128698.021:350): avc: denied { create } for pid=9479 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) read(r1, &(0x7f00000001c0)=""/40, 0x28) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x26) rt_sigqueueinfo(r5, 0x15, &(0x7f0000000200)={0x38, 0xfc9, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 212.008422] audit: type=1400 audit(1575128698.121:351): avc: denied { create } for pid=9503 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) fallocate(r2, 0x0, 0x8000, 0x7ffe) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 15:44:58 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='\x00\x01ev%k\xe5ycW\xe5\xc0(\x00', 0x8000, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0xfffffffffffffdc3) r5 = inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(r5, 0x7, 0x1, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/de/ptmx\x00', 0x419001, 0x0) socket(0x0, 0x2, 0x0) [ 212.129223] audit: type=1400 audit(1575128698.251:352): avc: denied { create } for pid=9508 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f0000000a80)="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", 0x48d) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) r8 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000540)) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000600)) r11 = syz_open_pts(r10, 0x0) read(r11, &(0x7f0000000080)=""/11, 0xb) fstat(r11, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r13, 0x200004) sendfile(r8, r13, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r13, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000800001ac1414bb0000020000000000000000004e2100004e20006d00008000a200003b0cee53f7b7caef98e6a756eb7500be41b4417e7f15337548448a1585d9b15017bd438f03f0f121b00abf0b950b1be8f2f5227e1508b4534183683fccc2c633ce0695fe31f72164d15e65159631e7d96c09b7ec70f663745aaf96a419ae4cbc967f602da778050000009b773771d65dbb62d037b891a2dad6aae7745be427", @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000000000000000ac1414aa0000000000000000000000004e2400054e2300070200206d16000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="0101000000000000ffffffff00000000ff7f0000000000000000000000000000930d00000000000040a6240000000000f9ffffffffffffff00000000000000000000000000000000060000000000000001000000000000007f00000000000000ff010000c06b6e000300010000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r7, r12}, {0xff, 0x20, 0x1, 0x1, 0x6, 0x7fffffff, 0x9, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x6, 0x8000}}, 0xe8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000380)={0x9, 0x1f, 0x0, 0x12000000, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0xffffff2d, 0x22}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'\x00\b\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timerfd_gettime(r2, &(0x7f0000000100)) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 15:44:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x4, 0x5) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) signalfd(r0, &(0x7f0000000040)={0xa96c}, 0x8) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x81) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) 15:44:58 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 212.287953] audit: type=1400 audit(1575128698.411:353): avc: denied { create } for pid=9532 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 15:44:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xa1fb5000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x4c) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r6, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)={{}, {r7, r8/1000+10000}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) [ 212.335756] audit: type=1400 audit(1575128698.451:354): avc: denied { create } for pid=9532 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 212.419404] audit: type=1400 audit(1575128698.541:355): avc: denied { create } for pid=9542 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 212.494816] audit: type=1400 audit(1575128698.611:356): avc: denied { create } for pid=9532 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=0 15:44:58 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 212.543151] audit: type=1400 audit(1575128698.661:357): avc: denied { create } for pid=9532 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:58 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:58 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:44:58 executing program 0: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x488d02) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x8000fffffffe) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) io_setup(0xb0, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000001cc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000300)=""/65) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/status\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x218302, 0x142) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) sendfile(r2, r5, 0x0, 0xa5cc554) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140), 0x4) [ 212.725824] audit: type=1400 audit(1575128698.841:358): avc: denied { create } for pid=9567 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 212.815143] audit: type=1400 audit(1575128698.931:359): avc: denied { create } for pid=9573 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:44:59 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:44:59 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffd) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$selinux_load(r0, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00030000000100000067681bfd070000000000000000fb6c7a2ce29ab9"}, 0x4c) 15:44:59 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 213.136565] SELinux: unknown common ¹ 15:45:01 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:45:01 executing program 2: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='.\xf3\xf4\x00@I1\x8f\xae/bgr', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0xfffffffffffffef6) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000003380)='/dev/zero\x00', 0x4000, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000003400)='fou\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socket(0x1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0xfffffffffffffe4b) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000000)=r9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r9}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket(0x1, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000000)=r12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r12}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f00000034c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f26eb8bd7000fe5bdf2502000000080004000100000008000b00d84b1ee7b408940482b0f6a6be4f688c84561fb61a1475eb0953b38e0639322ac02d987b650f77f1b9b1c2dfe967734a38b8fb3fd34a62fddf54e1d89d8056c010015e5d8d8e1a2ea5be060000000000000089d8a0f32061b1374c61363594f6d2953b2f365cc6e0e20941c8000c026994b09debb8b994a2e8c3619cdc3e04710717c78240e1d20f993d5beacedb178f3e3fac3a2e115991b11ec27c83d3e3c315916ee4d64ccb04258af1cce89882d4b2c23d707c165e462bc3bd79dff4e52d634e4e3955944a39625903e23f01018deab1e0ccde6bc0", @ANYRES32=r12, @ANYBLOB="00000900a814ffb5592c976cf65a1850cbc28cf41503040002000000080001004e210000140009000000000000000000000000000000000147366cefe1db590083d4ca61955a4812ad4b173bead33a58fb1d14dcf6c92fad13113f4a56ab6d4132274ebac912d9069375cf9c8282e25b38e12db4778a870f9d96290a385518892217d08d"], 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0xfffffef3) read(r13, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r15 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r15, &(0x7f00000001c0), 0x8000fffffffe) io_setup(0xb0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r13, 0x80045400, &(0x7f0000000100)) io_submit(0x0, 0x0, &(0x7f0000001cc0)) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x218302, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r2, r15, 0x0, 0xa5cc554) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x800, 0x4dff8868581ae3ea, 0x9a54709542ddbaa7}, 0xfffffffffffffc62) 15:45:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000001a00070cab0925003f0000120aab0703000000001d60369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b460000bc00040009000000000000270400117c22ebc205014000000000008934d07302ade01720d7d5bbc91a3e3280772c05f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf1902000000000000000594e0ad91bd0734babc7c3f2eeb70d43dd16b17e583df150c3b310f411f46a6b5674672715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548dedce8c379bf99dea50175e63fb8d38a87c90d3b95f500"/252, 0xfc) 15:45:01 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = eventfd(0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:01 executing program 1: socket(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) creat(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x307400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:45:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r2, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="b7463afe09354e89123df74c50769c123a682d3e7171bfd53de30e8a23a137d424353500000000000000081168ed01ff83dbad715c8d22ba26fc29d2938af81bfc160942fcde34059e0d2cee657140f87eb34a0b4ab41868a466664138fdea7b7e02b020c445c8bd397068ba7f72301ecf100d691565f75e668c80150c11fa4a114f3b16723cf748894188e3a0d15f547cc400389a3f1bebaae9618f562ad12822636a35bde3ea66dbb2", @ANYRES32, @ANYRESHEX, @ANYBLOB="44016a6f4f41162877d76835b5f088046e2b9f30409ac4076404043c8dd3ec2f7ccfe544673df5036d2fc4aeed29e68cb3dfd4baf052c7230cca2ea48d431a61c8ec22eac07d7ea2bd6c1739b2aeecb01d7f8e3512f1a9cacca40c074b19391a1a1e133a512178bff6930e18f5466a7a3cadf127046d6c76fb"], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0xb21, 0x4, 0x0, 0x0, 0xd9, 0x25}, &(0x7f00000000c0)=0x20) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) fcntl$dupfd(r3, 0x0, r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'irlan0\x00', 0x9802}) r5 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) fcntl$setstatus(r1, 0x4, 0x100000427ff) 15:45:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgro?l\xc7\xc7\xa11/\x93\xb8>\x80\x04\xc8up\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r1, 0x1c08) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write$FUSE_LK(r3, &(0x7f0000000040)={0x28}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30}, 0xb0b8) 15:45:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r1, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8000, 0x8, 0x2, r2}) fcntl$setsig(r3, 0xa, 0x3a) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$keychord(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = dup(r4) write$P9_RREMOVE(r5, &(0x7f0000000200)={0x7}, 0x7) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r6, &(0x7f0000000200)={0x10}, 0xffffff9a) ioctl$TCSETXF(r6, 0x5434, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r7 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r7, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r7, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[]], 0x8) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r4, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r8, &(0x7f0000000380), 0xfffffffe) 15:45:01 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:45:02 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:45:02 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25010000000000000001410000001800170000000e000c780062117564703a73797a310000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2f31aee1, 0x0, 0x6, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x20008004) sendmmsg$inet6(r0, &(0x7f0000007c40)=[{{&(0x7f0000000080)={0xa, 0x4, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000002900000039000000000202010000000000000000f7947a8b"], 0x20}}], 0x2, 0x0) 15:45:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x400000000080803, 0x40) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x4d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x6d7) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 15:45:02 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x26) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x3, 0x3, 0x80000001, r4}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) fcntl$setstatus(r6, 0x4, 0x6100) pipe(0x0) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001fde), 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) sendfile(r6, r7, 0x0, 0xa5cc554) 15:45:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = eventfd(0x0) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r11, 0x4c02, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x0, "146bc58e830b6bd744982b2ae4f7c2fec6a92173f5e1f48de2349b1bc98d3b55e5008e31e1f15c2f3b7e3506b2adf8c9770ac8146362d9f2ffcdc5d20963722a", "dd3415614c89f48bc23123de76559bcaaa37f9452d70e9fa06f2bcbff99f1db8", [0x1, 0xffffffffffffffe1]}) getpeername$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c) 15:45:02 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f0000000740)="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", 0x14d, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1}, &(0x7f0000000300)=ANY=[], 0x0, 0x0) gettid() ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008913, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = dup(r4) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "fa72f676785f799c", "e5081f23a790ca15d7f82d79883a988d", '\x00', "dc3623a25b3050f9"}, 0x28) dup(0xffffffffffffffff) r6 = socket(0x10, 0x2, 0xc) write(r6, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5460, &(0x7f0000000000)) r8 = accept4$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x1c, 0x400) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000140)={'lapb0\x00\x00\x00\x00\x00\x00\x00\x00\x80\x06\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) fsetxattr(0xffffffffffffffff, &(0x7f0000000400)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000500)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7', 0xfffffd63, 0x3) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r10, 0x8200) r11 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r10, 0x81ff) syz_genetlink_get_family_id$tipc(0x0) socket$nl_route(0x10, 0x3, 0x0) 15:45:02 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(0x0, 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:02 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = eventfd(0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:02 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) socket(0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xbd3f523cb72a7548) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000680)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0), 0xc) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) open(0x0, 0x8240, 0x8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc40990900000000000000006bff907fd93438d9738d8b2880e276a00032edbfbf38708fbddd364ff4a4d59fc46994a32643951139738db886ac7b96d0da25ec386da41267741450651a8710775932611684c626d45757320743605eabccff6e21773b3cb59b2e70665361867c3b6488"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r2, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fremovexattr(r6, &(0x7f0000000300)=@known='trusted.overlay.nlink\x00') symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') 15:45:02 executing program 1: request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="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", 0x1000, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0x62, 0x1a}, &(0x7f00000000c0)=ANY=[@ANYBLOB='enc=raw hasm\x00'/64], &(0x7f0000000140)="61cae2b25b4b4452bf74d901ccb9e804161e00b6ca089993d3efacf14656fe216f62d6b9e2809ca1a5b5421fcb16a0c1872276bd75c9870baef3efb4de86b70f89994891f29d4951e15c79a2fc6729ba9f88790f8f850ff449098a80a940c6953f8d", &(0x7f00000001c0)=""/26) keyctl$set_reqkey_keyring(0xe, 0x1) 15:45:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r2 = dup(r0) pwrite64(r1, &(0x7f0000000140)="18dda4ab5b1db8736bf3c18054fc23cb41a66d6a4d178233b4eac70aa2e6f81b4e10455bde06a0b341c20a5819661b9cb88b1e1563c82701d381365e70296aeb2c3c31508c5acda06fc5b6b1d516091757f31268f743dd57cf3760e4dd1c20c7100d98540ad78748a71a3c040865e48bc974f66a2a595fda9319feb9e8352d74785319a6a1742efbbb50b178ca26a8ab4c49fcebbad660ba833c8230a653846b23c750018a7e87232dd2b8910925ae7aa7abd6217b20ed0d5cf20d65d35c2684e4b195435261d131b93384669b9cb7ec9f54fc7c8f4107e2cd35a5bc489a422e9fa9457e48e02423635fec263bdea596", 0xf0, 0x7) r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000000c0)=0x80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept$packet(r6, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000015c0)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000001600)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x33a6154e53a88d5}}, 0x10) sendfile(r2, r1, 0x0, 0x523) 15:45:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) fcntl$dupfd(r3, 0x0, r4) fstatfs(r3, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) getpeername(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80) shutdown(r0, 0x1) 15:45:02 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(0x0, 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:02 executing program 1: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x5, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000600)) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r4, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) ioctl$RTC_PIE_OFF(r1, 0x7006) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r5, &(0x7f0000000380)=""/105, 0x69) getdents64(r5, &(0x7f00000000c0)=""/235, 0xeb) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r8 = open(&(0x7f0000000080)='./file0\x00', 0x500, 0x8c) mknodat(r8, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="940000000a18cf44af0106b433595d953fbfb116eb241e745de06729eab0ae08f3a1e288edcd0805fb8db2ad7f5f005c7d734ac0a1f62d04d85d50381fb08202167fd5a40148bbd2ec40be938417f7a14fa74bdf427fdd00be9d1356ef3a8810628173417244f738185c8f6a7b676b02e0694cfc9807000000c122d40795814b0c97201c09000000dd76b37f53d6ec5af798149c9f06a4835eef6e69dfa6fb7826aa5ea527fa774b4538a3827cd147bad3119f94b50e11c403a888b2f3fe952a72cf4a", @ANYRES64=r9], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x68, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x50, 0x17}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xfffffffffffffe45, 0x7, {0x21, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x1de, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x48d1}, 0xd0) 15:45:03 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(0x0, 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 216.956962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 217.063369] audit_printk_skb: 45 callbacks suppressed [ 217.076427] audit: type=1400 audit(1575128703.181:375): avc: denied { create } for pid=9741 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hopopts={{0x218, 0x29, 0x36, {0x0, 0x3f, [], [@enc_lim={0x4, 0x1, 0xed}, @pad1, @generic={0x1f, 0x44, "1bdeb9dfc4771fab81fd92d134b03bdcab8c6dc2136c02c6ea27bc1aeab1c15fd187b531a4c80e0f186655e2a1394c89d78d428530f9d4517fd78214dc2a3ec4e3cc917a"}, @calipso={0x7, 0x10, {0x81, 0x2, 0x53, 0x1000, [0x1f]}}, @generic={0xba, 0xc7, "797defaad85a58a293d41e99282207848ed4b3f8d0c8888f77bb97f81b62b3149fbb1e18b235fd82930fa31b2fb8836e6c796e6222628e1420ad042a3dcfa6414ae39289a86fc9fa523eadaf18a867b0b37349f9ce5a55cf7fc7a2b8cf2146b5d81f99cae80b58beb0f6a2bbc05290a570310e53c6c8097a2436d495267823972829ae84cf2b6dff8d2c1a4e128071a0c5b3348571e129e72d9e0dc614c4cf8736d2d0ae444b3029d72a8619f03a26581880a2d269550966bb51cde8d21771130cd53147019df8"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3d03}, @generic={0x6, 0xc5, "f4e3d2a87210a8d5023c75c492ad1f37673d39cdb849d4c750801e87c7b1fed4cc54f16515578fcc4fb7f0110ac12a70edb9a901d7b5ad463083cf0fd6d834ac553f1c51b36d117c628aa34c792ed7ad814bf7364ff1bccb6bbf68abfeca7b494475ae78e99c61401b55ba492b64b7f3ba6f02b960e7edfeb1f1f84b12ddc91f274798c3ab569900ff596731bbcf946e7e8f045a0ed517a9d9d9933248b079a75b19226071dff8239f7961d314a49d051acf205779f133b7c045a7652a468a371f18a7af7c"}]}}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0xe, 0x1b, [], [@generic={0x18, 0xdd, "0c76fea62b986f84808a873b65794b68908977025cf6e9fdcdc7d258390d0b163bd38e8a73432758a123baa48f6896e73b5a2158d54c80154a99574f14e93bd4bae07166fefbde5de54eb5dca6fc00bcfb33531ec1e73856b8503c14a9b700794fe291765c15b5c8b81a3e0a90e76acf59e6641bb9dd4e146ed08af025588cc8672f46c052bb35556675448d1dfa9483bd74327d76a4aca069a52badf4ceb838cb6cd67c4270c2406b8127606aee5cc952a3b4709e3ec16fbaca2fe46eb3f72a30b94b46500576aa660d2374d3c7f28bc830ca44894a7748dae4e04c72"}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0xff, 0x4, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0x419, [0x4, 0x1ff]}}, @pad1]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x84, 0x8, [], [@calipso={0x7, 0x38, {0xfffff12b, 0xc, 0x3f, 0x67a4, [0xa4f, 0x9, 0x8, 0x9, 0xc7ac, 0x3]}}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x29, 0x2362, 0x1, 0x9, 0x0, [@ipv4={[], [], @empty}, @mcast1]}}}], 0x3e0}}], 0x2, 0x0) 15:45:03 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:03 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = eventfd(0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='net/arp\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pwritev(r2, &(0x7f0000000300), 0x0, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200), 0x4) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="002d99add280fdce126a4e4b6e833e25223a72a2bd261d3e147061427dcbc4848a3f99cf6fb625642518092a30be999db133b7e6773888d374eb6c0a445ac61a392479118c77c82a672f3dee147bb913144f"], 0x52) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r5, 0xa, 0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) dup2(r5, r6) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000340)=0xfffffffffffff830, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x2800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) io_setup(0x3, &(0x7f00000000c0)=0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xffffff79) r10 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) flock(r10, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r11 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r12, 0x0, &(0x7f00000002c0)=0xece) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) dup2(r12, r13) fcntl$setown(r13, 0x8, r11) r14 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r14, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r15, r14, 0x0, 0x0) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r16, &(0x7f0000000240)=ANY=[], 0xffffff79) writev(r16, &(0x7f0000000140)=[{&(0x7f0000000000)="95", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r17, 0xa, 0x12) recvmmsg(r18, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) dup2(r17, r18) fcntl$setown(r18, 0x8, 0x0) r19 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) flock(r19, 0x1) r20 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/attr/current\x00', 0x2, 0x0) r21 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000bc0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_submit(r9, 0x8, &(0x7f0000001c80)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="edfc58d353573c54d3dabf4092cf103bda6c992d58bf04d01af0899b50ad0dfefdfa255aaa49d04497cb7cd4f33af06e13a0a17dd838629df0cdaf8b716edd2db9f6caca77d52245c9041a29734c1b8e5952ebb76bb695d03ea8b19d7192a52a18a2d7894413c878971462f87c8831a6770e3de49b7ad0ecaf884f8266e8dfaec2e664ea5af655cc6c18070f221a8bb4d2705776712bca42e0af9bd06ea32d33678d1cf32e2e916834f6a3849b7671c8909a3cc8727a2926375583a2a8a26fc1567d5afa2cc084947b3e38f252193478e85934b7ebfaf029cb8bdf77c1f03dc6f753", 0xe2, 0x3, 0x0, 0x4, r10}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="1169e09b6867b452", 0x8, 0xffffffffffffa69c, 0x0, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xf000, r13, &(0x7f0000000500)="0ba93f1d0e1fecff044b8974f14e3bbabb2d1e3e75226289bd2260a4f1d402a6fc0a948c40", 0x25, 0x1ff, 0x0, 0x2, r14}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xb5dc, r10, &(0x7f0000000840)="b7d10d153b90d2dfcf83c82c483e5b947e1bf1199a5e5f4550bdc31e2f8610c76d25082758dac546985d4fc4413bbd4b5771075e60aa22ba08903e31ca1e23fb832cb7f35bd357e1f23c5b891d44aeaa818ca1fb4ee5e5cc424f01228b418eb8a4eeea0978bdc6f36880343f9ccfe669c3b3549a46822bc00aefb4981996c55ec6553c2a6ac3510d29b31b3bcae9159df7836cdc5baac4d02710b08b199bd826aa8fdb5ac110f5cc2cfc36c12009b1d3b707d8a2b861742836c18e3114af51562a89319b3c4d4bbfaae124", 0xcb, 0x6, 0x0, 0x7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xa, 0x9, r18, &(0x7f0000001d00)="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", 0x228, 0x100000001, 0x0, 0x3, r19}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x9, r20, &(0x7f0000000a80)="a6cf119e8ff65aeaf6d29b74ebf9dec94f70d245458a632dc6d7e59cc013f8ad5839e4b48a84f99d981b2a67bcac3babc0ee498c37902ec8593fced52c2e846bba6be2fb5bdf91a731dd34d05a2d9579a471", 0x52, 0x1000}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x5, 0x40, r7, &(0x7f0000000b40)="6a0f4aabb74463098d444f610b733e20494a3940287f8a3a97853fe3848530b70735167c552721fd972e110f00af656a2fc4e1bb92d970ef7fe2a12f62bb9e8128c756610ad97717118c8bf738e35fc3df1911928579efda416da9741a91", 0x5e, 0xc2c, 0x0, 0x0, r21}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)="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", 0x1000, 0x2, 0x0, 0x0, r10}]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 15:45:03 executing program 2: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000100)={'un#onfined_u:system_r:insmod_t:s0-s0:c0.c10-%', 0x20, 'staff_u\x00ENf\xb7\xf4sh(G\xa7K\x9f~\\5,N\x9b\xbb\x83\xd8I+.\x86P\xfb\xd1\xa8x\xb3\x86\x1f\xc9x\x0f\x8a\xfbk\xea\xbd\xfe4\xed\xc14\x9amz0\\\xe7\xcf>\xe8\x0f\x9b5\xb9\x8a\x9c\xf8\xf8\x84h\xc5\xe2\x1b_\xb9\x9e\x04S\xa8\x81IUvG5\xb9\x872y\xddfD\xe8eY\xbc\xf9uO>(\x05\xcc\xe3\xd84\x98L\x93\r\x1d\xe8h\xd7\xe5d\x8a\xeaYH\xbb@2\x9f#\xeaK5\xdd\xd7\x17\x88\xdf>\xa1|\x0f\x01\xcf\xb5'}, 0xbd) 15:45:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_group_source_req(r0, 0x29, 0x1, &(0x7f00000000c0)={0x2, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5460, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x10000001}) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000042c00) [ 217.565461] audit: type=1400 audit(1575128703.681:376): avc: denied { create } for pid=9761 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x40) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) pread64(r0, &(0x7f0000000300)=""/136, 0x88, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xfffffffd, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) setgroups(0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@local, r2}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) write$nbd(0xffffffffffffffff, &(0x7f0000000180)={0x67446698, 0x1, 0x4, 0x2, 0x4, "838aaaa77488cf33220b34892d9b5c46f89c8e5b96fdc8e9d29810a69aca25223a8a9ea1ae25752c1e2466e95203b46273ee038cba8c17678c870a3e536eaa5f0380cbc7b492c08cd77e0c8f0bd9e584cefce6d24d7169eec84845a6bcf0"}, 0x6e) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) 15:45:03 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="140000000000001912000007000000940491e968eb4b4c"], 0x18}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) fcntl$dupfd(r1, 0x0, r2) dup(r2) [ 217.744813] audit: type=1400 audit(1575128703.861:377): avc: denied { create } for pid=9776 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:03 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') memfd_create(&(0x7f0000000300)='/dev/l\xc3op#\x00', 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000801, 0x0) sendto$inet(r2, 0x0, 0x0, 0xc860e17cbf55624f, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000240), 0x45483d5a560d7693, 0x0, &(0x7f0000002a80)={0x0, r3+30000000}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000100)={0x0, 0x4, 0x1}) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0xffffffffffffffb9) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x400000000080803, 0x0) socket(0x10, 0x400000000080803, 0x0) socket(0x10, 0x400000000080803, 0x0) write(0xffffffffffffffff, &(0x7f0000000980)="241400001a0025f00485010000000000000049ff70880000800328000804e0753d7efcfe3c1f79c16883fbd5cb02010001010000bc71176a36ede498534108e58342fa94a235a2a445f9e526fae4afc5166ec7db3909000000000000003cd59d087fcabc54c1cdaba51e006a76347e882991b0e07364aac52bfbffffff5cdf4c2d786e738902ae72679e37ebd5c738fa0796e6467a474c215024da9ea706798256c6a7328bcfae64250080ff00000000003cc2850db118f6994ebda3775294d3b3de5b5cdadf60c536247791a9ab8cb5e8abeff8bfb3b36c3a285ffe6edbaa89eb9d5af60debb0b32a38e90a7236a816b80f73b90a86ca22ee84567089c821f7250a4ba6e3584161d2196bd348b28c61adf093319e2685f2e0faad532581488caa556829ac30e46cf1fc828079642907b1ab0400f3ca58ff39ffbb6bbd1f6a49dd7ce9040d97808d274f26defbb8b8ac959ed2d1f62a56cc9423cdd5fb546f53fdb36884c2ec46faff56b3dd398107a83c0a9d1c9b7b1c7faf586c77b9b1a1afe783a8ae9de03e60ee279550a09b000000000000779e1cb3c2d42ccc83472195d16eae56cfb202a9110e7b6e21daf79e0c1aa6ff9cd6108faecbfe61621592f110815d4aefee4e8ce1d6d904f583f058d0f52b41d353f5fed22a89011b8e84b1f047565fcedcc56e714e36e3d47d192124af8041fcf7aaa29f4dcd322a6da619a3084da3e68559e9e917956447e187a703a08a241d0d28bb444419c397c15de351472a5db71d6e5e87db96f7375f14da19027857d0463d6e56c4c858c64b5a615b1cc5", 0x243) [ 217.930424] audit: type=1400 audit(1575128704.051:378): avc: denied { create } for pid=9790 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:04 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4100017e}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 218.215801] device lo left promiscuous mode [ 218.259758] audit: type=1400 audit(1575128704.381:379): avc: denied { create } for pid=9818 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200004) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r2, &(0x7f0000002340)=""/4082, 0xff2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x500000000000000) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000042c0)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x806880}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20012dbd7000fddbdf25040000001000040000000100320200008c07000014000100ff000000000000000000000000000108000200060000000800050002000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) connect$unix(r5, &(0x7f00000001c0)=@file={0x2, './bus\x00'}, 0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x120000008}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) getpgrp(r6) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000001400)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='sit0\x00', 0xd5, 0x110}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0) 15:45:04 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 218.498980] audit: type=1400 audit(1575128704.621:380): avc: denied { create } for pid=9846 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:04 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5460, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x4671cad5f590744d}, 0x8000) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) dup(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x4240a4b8) splice(r7, 0x0, r9, 0x0, 0x20001000010005, 0x0) 15:45:04 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:04 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_WIE_ON(r2, 0x700f) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x17) tkill(r6, 0x15) fcntl$setownex(r5, 0xf, &(0x7f0000000040)={0x0, r6}) clone(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$unix(r3, 0x0, &(0x7f0000000140)) ioctl$RTC_VL_CLR(r4, 0x7014) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x1, 0xe}, @llc={0x1a, 0x310, 0x8, 0x0, 0x1f, 0x8, @broadcast}, @hci={0x1f, r7}, 0x8e9, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8, 0x4}) [ 218.772597] audit: type=1400 audit(1575128704.891:381): avc: denied { create } for pid=9890 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 218.824691] audit: type=1400 audit(1575128704.941:382): avc: denied { create } for pid=9890 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 218.856890] audit: type=1400 audit(1575128704.981:383): avc: denied { create } for pid=9885 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 218.900964] audit: type=1400 audit(1575128705.021:384): avc: denied { create } for pid=9886 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x26) rt_sigqueueinfo(r2, 0x1a, &(0x7f00000000c0)={0x2d, 0x5, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x4}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x18) wait4(0x0, 0x0, 0x0, 0x0) 15:45:05 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x6, 0x1, 0x2}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x11}, 0x45c) 15:45:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000001400)="be04da5ced2be0b13de080d6b9e5c4f628931c375d99f041f11558240ad0489cd0ef9d57a6410f3c14343114768f575feb325a4c14e143720d4c4422b50f9cfd566887777a529ef49b620c093d168aa0673bf2e60927e87cd648df461aa2bb1b880df154f30c072c00b05363cdcdee3f1c2834f476f329f8bdf8ac9bba98c7f439c97575e4f04901130744274610950a47cb4e58cb304203b55fed238df5eb6ffd05ff05488152b7d2b561f4f6492dc26cf6b4f45c182e91a6c1d82a2c92be3ec1c988577e9d13b9d1ab7d27b9e05b30a8975dd21a0d5f88af62deedd8047daf9a1f", 0xe2, 0x20000000, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) socket(0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xfffffffffffffd38) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sync_file_range(r0, 0x2, 0x7, 0x2) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) read(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)={0x1e8, r4, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8f11}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa97}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8403}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcb8c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x392}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd92}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b6e5826}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47fcf104}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x353b1ba}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb83b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb61}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4040824}, 0x20004861) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) [ 219.108155] input: syz1 as /devices/virtual/input/input17 [ 219.128004] input: failed to attach handler leds to device input17, error: -6 15:45:05 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)="bd0c809b3fd7cb85d7f0ee6cc12fb3989d53406abeb14e66d091c8810d75c70f9d439fa2550602a932ed667d8d7d74fb8d365b1371fb60421498955d484a", 0x3e}, {&(0x7f0000000040)="6b4fabd9632bf675c76acdfc4b3c7113d20637be583131afb13cc173299352cb2040c50ebda967d3d58fd353cce627b1639d", 0x32}, {&(0x7f0000000080)="073a9ab2254f0267d75f2a1442d158d25dedeac5ff170f17d4cb8caf75884804038fc5e1f83007aa5abeeefd052745cd1103aa2357058c577ec3863ba3771e6cfcb6062993c2f52bb59024ecdcf614a85d0affc5c3a3622a41a745f3159fbc8ed01f703b8e12c5c995561ccfd6dde528e1b9931b935ad19247b1697dd3dc198abad669e5f9076cd7a17ca899818d3fa49c5d46b32b2c6fb98ececc7895d060bf0318b075857bfd1fe8708100cb2009f96b4ea7088bd81e05bcc6412b665c9951e5349844d4bc4cc2e291be17364f5b2dc18f2c8cd16d60", 0xd7}, {&(0x7f0000000440)="25be20a0c75e5cf6e9c10da0a3bf8f4edd1ac74b1eee60a9c64c360fcea31652a4e596bcdd3638e2e8239f888f8cb01dd8823eb390baf87ad037f77383dcf808111de7e8d60b90bdc41aec3292a4e06b9f884482300a2be37841b04456aa2cbe10d4ea96ba2204c761213db15391b54e776ffaef06aacc929a83c15278d2c7841cdcc0b89ea5c027c06f1893626962feb59120435dc51a070b52bef677bfc32ef236e0628122511fd93717141bcf0d8914dd345150290058ed36910add4a9841031f", 0xc2}, {&(0x7f0000000540)="10980fd5857b2a392ce16a883c8a9a2a9eb88dae2c2f690bb9fcb79db62e913ba6e83f5ffe60e04ff9a104d25b1d455354bc939197dd0ac15994739619ea1642f3a2775043f6ae116d25d0cea65a5f7893e433e6d72ececf56582da21d8585fc6d54303a8fcd438496b2b3964488ebc2e0e06bcf4ea02c0504883e533496afaef0fd0d13669440beb7ee2b7360c8c14c020105852fe7e97dce16f33ea6bf03db613cdb94b403246ee9fdf8de5099f8546489d89df1f5907e3ab967b2158004c70e", 0xc1}], 0x5, 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x14) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) clone(0x2088c503, 0x0, 0x0, 0x0, &(0x7f00000001c0)="329117d380804892b12765d00559bfd10d") [ 219.205421] input: syz1 as /devices/virtual/input/input18 [ 219.221268] input: failed to attach handler leds to device input18, error: -6 15:45:05 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:05 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:05 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:05 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:05 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="966bf507f60e580f6e3419c6c6d670dc8a86cca32d0000000000000000d7033b926eb9278694c542bb6cfbcca3de591a7403c3c7293da3", 0x1000005e5) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x20000) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r5, 0x2081fc) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) uname(&(0x7f0000000240)=""/107) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r6, 0x4, 0x40400) write$FUSE_WRITE(r6, &(0x7f0000000080)={0xfffffffffffffd73, 0xfffffffffffffffe, 0x0, {0xf45}}, 0x360) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5460, &(0x7f0000000000)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x24000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)=ANY=[@ANYBLOB="81be6470ed545b73bffc2df53e5a48ecb3a609f87e4cda3be78831a37faab95c065c8664d2d243946d9f077edf71560d55ca4602c2e063129c4b7393b342a7500a1fce623fc3d1ea8cc5db9e6d5c4c0d32dc1ea19ff692a60ef32da89bc9", @ANYRES16=r9, @ANYBLOB="08002cbd7000fcdbdf2506000000100001006e65746f657673696d000000100002006e657464657673696d30000008000300030000000800040001000000100001006e657464657673696d000000100002006e657464657673696d300000040002000000100001006e657464657673696d000000100002006e657464657673696d30000008000300030000000800040200000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080004000200"/202], 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(0x0, 0xf) r14 = getpgrp(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xac, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}]}, 0xac}, 0x1, 0x0, 0x0, 0x16048411}, 0x4010) 15:45:08 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:08 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x89d32c2, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000000)) fsetxattr(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='os2./de\x00/lnop#\x00'], &(0x7f0000000100)='\x00', 0x1, 0x0) 15:45:08 executing program 5: r0 = socket(0x3, 0x3, 0x0) r1 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000}) fcntl$setsig(r1, 0xa, 0x3a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000200)={0x10}, 0xffffff9a) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x3de) listen(r3, 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) shutdown(r2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffe7c, 0x20000004, &(0x7f0000000180)={0xa, 0x4e22, 0x800, @rand_addr, 0x7}, 0x1c) write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x10000004001fc) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000080)) r8 = accept4(r3, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r12, &(0x7f0000000140)=0x20000100000001, 0x8) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="104988e155d4f3832bbea5fed0e42b47e96e903bdb013e3ea4bde6e1b85110beabc1b8d8dc8d54912934ccb3e9c88ebd0be241bf6f8741f9e1a6f1504fe3e80fbe95320a1093a9e5d9bcb297a8204f0f53657f99fe5cbb558fb4c20fc0f5148fa8b879fe830c5935a308f3e0c0365c5fed3e6309443452fb9b577b96f31da37b957a61d88b70335ac5d6ce7584cdff19e907cd8116947c6af57d725baa8172cc98e694b31b69ad6420163c29c20a5566c463cece94aed34dd1256cad89e0ceb31e", @ANYRES16=r13], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={0x108, r13, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37fa2a32}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffff7db, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x41110}, 0x4040000) sendmsg$TIPC_NL_BEARER_DISABLE(r11, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x190, r13, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x2af, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66ea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000100) 15:45:08 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:08 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) mlock2(&(0x7f0000810000/0x2000)=nil, 0x2000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) fcntl$dupfd(r0, 0x0, r1) fstat(r1, &(0x7f0000000080)) mlock2(&(0x7f00002ea000/0x2000)=nil, 0x2000, 0x0) 15:45:08 executing program 2: open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x0, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x80c4) gettid() pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) clock_gettime(0x3, &(0x7f0000000040)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@local, @remote, @loopback}, 0xc) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r6, 0x0) [ 222.594773] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 222.617432] audit_printk_skb: 27 callbacks suppressed 15:45:08 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:08 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x1512c2, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x3) ftruncate(r3, 0x2007fff) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', 0x0, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9a1bc5092b94646853a1208e79396bc795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef63d445e5bcef53d3a47853e7af5d0328209ad73224000000000000000000000000000000000000000000850576"], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0x1892277a) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r7, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x5460, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r4, 0x7}, {r8}, {0xffffffffffffffff, 0x3}], 0x3, &(0x7f0000000180)={r9, r10+30000000}, &(0x7f00000001c0)={0x5c01}, 0x8) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) [ 222.629698] audit: type=1400 audit(1575128708.731:394): avc: denied { create } for pid=9981 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 222.698738] audit: type=1400 audit(1575128708.821:395): avc: denied { create } for pid=10014 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 222.798215] audit: type=1400 audit(1575128708.921:396): avc: denied { create } for pid=10013 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:09 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 222.973800] audit: type=1400 audit(1575128709.091:397): avc: denied { create } for pid=10024 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 223.026795] audit: type=1400 audit(1575128709.141:398): avc: denied { create } for pid=9979 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:09 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0xa, "c648b3f072b2d362c0960aa4b43d59"}, 0x11, 0x3) socket$inet6(0xa, 0x80000, 0x6) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/udplite6\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58eb16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7de6e38d2d29be9a5adffffff7f00000000428958b132e07900"], 0x10}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x61) [ 223.167240] audit: type=1400 audit(1575128709.291:399): avc: denied { create } for pid=10029 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) r3 = socket(0x200000100000011, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "450c4df678f11913", "6406e96dfa3f81d83b3134c19e6aed55", "9bce9b2c", "cd4ba513618d82d0"}, 0x28) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 15:45:09 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 223.501012] audit: type=1400 audit(1575128709.621:400): avc: denied { create } for pid=10014 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x01\x00\x00\x00\x00\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) r6 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=r6) [ 223.642765] audit: type=1400 audit(1575128709.761:401): avc: denied { create } for pid=10082 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) r3 = socket(0x11, 0x4, 0x7c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5460, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x21fa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xea56c492d1540e97}, 0x80) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r9 = socket(0x1, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000000)=r10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r10}) bind$packet(r3, &(0x7f0000000240)={0x11, 0xf8, r2, 0x1, 0x4, 0x6, @remote}, 0xfcd3) close(r0) 15:45:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x100) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0xd4, &(0x7f0000000280)="832b6e56fce8e75f863934331b265009a79c9a49a90ece2f73acf5508cfeef026850ac4667e04c4fe9b04570afffc8524fef6cd589886c03f3957a532881876eb1a7b515e99cc5c7130d563db81b6e739f18e6f59a6f8e89f0d3774504fafed57343cc07d3de2a27e573b362234f8cc0d014aa4ff784c16054509470bea32dec3829f994e9b4b58811e34cdc6c95e50e48c5b5c78aa775153c6f90f16886e995e5a9f35c49685eee089bdcd229cc4162f90332490b6ffc7919cb55222d2a6cf98d7d2077813dfeb27d29fd6b2762fb81c3ae3c34", 0x0, 0x0, &(0x7f00000001c0)}) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) accept$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) fallocate(r2, 0x4000000000000010, 0x0, 0x7ffe) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$FUSE_GETXATTR(r9, &(0x7f00000001c0)={0x20e, 0x0, 0x9, {0x400080}}, 0x18) sendfile(r1, r6, 0x0, 0x8400fffffffb) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 223.792354] audit: type=1400 audit(1575128709.911:402): avc: denied { create } for pid=10112 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:09 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 223.923878] audit: type=1400 audit(1575128710.041:403): avc: denied { create } for pid=10112 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:10 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc00c28af09239543, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x0, 0x0) pipe(&(0x7f0000000840)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300600}, 0xfffffce5, &(0x7f0000000600)={&(0x7f0000001e80)=ANY=[], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000380)) fchmod(0xffffffffffffffff, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) write(r1, &(0x7f00000001c0), 0xfffffef3) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x83) r6 = epoll_create(0x5) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x200f}) r8 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r9, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0x0, 0xa054b98f838cc548, 0x7f, &(0x7f0000000180)) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x1600) 15:45:10 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffc}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) poll(&(0x7f0000000140)=[{r2, 0xc082}, {r4, 0x80}, {r7, 0x1000}, {0xffffffffffffffff, 0x18}, {r1, 0x1000}, {0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x1018}, {r8, 0x400}, {r1, 0xd20a}], 0x9, 0xfffffffc) fallocate(r1, 0x0, 0x0, 0xffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @descriptor="f2b3d399c33170c4"}}) 15:45:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r3}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@offload={0xc, 0x1c, {r3, 0x2}}]}, 0xfc}}, 0x0) 15:45:10 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x04\xa9[,\x00^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 15:45:10 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x40) fcntl$setstatus(r1, 0x4, 0x64800) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) fallocate(r2, 0x0, 0x101, 0xffff) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) socket$inet6(0xa, 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x0) epoll_create(0x200) 15:45:10 executing program 1: openat$keychord(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/keychord\x00', 0x40c000, 0x0) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000140)='./file0\x00') getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r3, &(0x7f00000001c0), 0xfffffef3) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0233db6bf7d4c6c3bc799dd222a748844f02020000000000000046373f2aaf296fc06065478d7a084c6ff8da30d01b9cb4c70aa8ab86379e5e50739aa773ae810086d7839a5956537934dc76491921d0a48c416dcd996ca1406ad49d7f3d3066e90c4c8c418f445e000000000000c7544282506bf07c678075fd0d0ad098b28efc0076619e3d29"], 0x1, 0x2) read(r2, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0x0) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(0xffffffffffffffff, 0x4000000005, 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='\xe7\x00', 0x0, 0x0) socket(0x0, 0x2, 0x0) 15:45:10 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) r4 = eventfd2(0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xfffa, 0x19, 0x1, {0x0, {0x0, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8db, 0x0, 0x3, 0x1f, 0x4}}, 0x3c) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000440)) pivot_root(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./bus\x00') fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x6e}]}, 0x18, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr, 0x20}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x3458c2, 0x8286a294398d5291) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r10, r10) fcntl$setflags(r10, 0x2, 0x1) ftruncate(r9, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8}) 15:45:10 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000040)={{0x3, 0x0, @descriptor="2bfbb054f92c8517"}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f00000000c0)='?\x00\b\x00\x10\x00\x00\v\x00', 0x2f81f875486fed45) sched_yield() 15:45:11 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@empty}, {@in=@remote}, @in6=@remote}}, [@mark={0xc}]}, 0x104}, 0x8}, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000340)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000340)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002880)=0xe8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) fcntl$dupfd(r10, 0x0, r11) write$binfmt_elf32(r11, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x40, 0xaa, 0x1, 0x9, 0x3, 0x6, 0xc41, 0x3b4, 0x38, 0xbf, 0xfb24, 0x3, 0x20, 0x2, 0x7fff, 0x0, 0x1000}, [{0x70000000, 0x2, 0x401, 0x80000001, 0x90000000, 0x3, 0x20, 0x2}, {0x60000000, 0x7fffffff, 0x5, 0x8e2f, 0x7, 0x20, 0x67, 0xc69}], "5fae14075827f6ceecefe01d014300b8e7d14a41ada0c3f3043d7353242cbb30a42dc718c400031b437cd67b52f8b049607bc438784a073feb3898583fb8e2b3fab62f8ee2c955a75fec87dc703720503cb4ca4ddb46b2aea2389c6a7dac79b51bf01dbd63f7e3035e112116239d476256c10aeef45b014ac712f0419c5b4dbc7b684b8d5283ce69d5654593186c6f3550ff44741b64ef55b53e3ea1294663b396b0d8b4d80d5276364ce5e6a9b0c334bdf6407a0ebc257800939436b16ebcc0dbddb18103d98633b2edc01e55da67dd09e67b457bf009c39b5ac449b598b9d315cbbb62a93ba9fc76a7613023fd921c1880", [[], [], []]}, 0x46a) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000340)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c80)={{{@in, @in=@local}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000032c0)={'team0\x00'}) 15:45:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)) r2 = socket$netlink(0x10, 0x3, 0x800) bind$netlink(r2, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbff, 0x2200000}, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r2, 0x402, 0x1a) write(r4, &(0x7f0000000640)="05662605063c6fe4cecccc84e4432330", 0x10) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5460, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x81) fchdir(r3) creat(&(0x7f0000000440)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0xfffffdc9}, 0x1bb49bd1) fchdir(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket(0x40000000000010, 0x802, 0x0) write(r6, &(0x7f0000000240)="fc0000001c00071bab092500090007000aab082b0000000010004c93210001c000000000000000000000740100039815fa2c1ec28656aaa79bb94b46fe000000bc00020000836c6c256f1a272fdfff7f6ad5afd633d44000007600008934d07302d29d5f12ade01720d3d5bbca1a3e2e80772c05defd5a32e2801a84ab82f6eff60cec18444ef92e475ef8e03af24a2c31fbdfb29d3ef3d92c83170e5bba4a463ae4f5566f91cf1902ad91bd0734babcae092eeb57d43dd16b17e5830000", 0xbe) fcntl$dupfd(r2, 0x406, r6) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x3) gettid() ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0xffff7dff, 0x9, 0x10001, 0xffffffff, 0x2}) clone(0x40020000, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000680)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev, @loopback}, &(0x7f0000000100)=0xc) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xffffff78) 15:45:11 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:11 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:11 executing program 5: timer_create(0x7, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x111) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r2, &(0x7f0000000140)=0x20000100000001, 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="104988e155d4f3832bbea5fed0e42b47e96e903bdb013e3ea4bde6e1b85110beabc1b8d8dc8d54912934ccb3e9c88ebd0be241bf6f8741f9e1a6f1504fe3e80fbe95320a1093a9e5d9bcb297a8204f0f53657f99fe5cbb558fb4c20fc0f5148fa8b879fe830c5935a308f3e0c0365c5fed3e6309443452fb9b577b96f31da37b957a61d88b70335ac5d6ce7584cdff19e907cd8116947c6af57d725baa8172cc98e694b31b69ad6420163c29c20a5566c463cece94aed34dd1256cad89e0ceb31e", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={0x108, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37fa2a32}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffff7db, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x41110}, 0x4040000) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x1021) fcntl$setstatus(r1, 0x4, 0x46000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x20) ftruncate(r4, 0x10099b7) r5 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') writev(r6, &(0x7f0000000580)=[{&(0x7f0000000180)='G', 0x1}], 0x1) sendfile(r1, r5, 0x0, 0x8400fffffffa) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:etc_t:s0\x00', 0x1b, 0x1) lseek(r7, 0xdea, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') writev(r9, 0x0, 0x0) write$P9_RUNLINKAT(r9, &(0x7f0000000280)={0x7, 0x4d, 0x1}, 0x7) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='dummy0\x00', 0x10) ioctl$KDADDIO(r10, 0x4b34, 0x1) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000200)={0x0, r8, 0x0, 0x2}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0xe8, [], 0x0, &(0x7f00000006c0), &(0x7f0000000500)=""/232}, 0x0) 15:45:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @remote, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2000, 0x0) write(r4, &(0x7f0000000440)="155de091a2489cdb8fbe0dd8eebe2de08ff9ef3fd81d0c04146d216f1e62aa3a1c4bb4781c89aed7e636978d89b4d4dccf91b61f7f507a173265a3aa26677dee42b8715be47f732cc151d5a621b625f8be3762583f3336ca2628552769a12a3438a822b886b1431f8f319834ec38b7d0b0eb2b347393a3734a8fcb75a2", 0x7d) read(r2, &(0x7f0000000ac0)=""/269, 0xfffffd55) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x1d2, 0x0) mmap$perf(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r3, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f0000000400)=@md5={0x1, "d8f1006d625a79f600"}, 0x11, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r6, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) [ 225.556126] keychord: using input dev AT Translated Set 2 keyboard for fevent 15:45:11 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 225.717985] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 225.747447] keychord: unsupported version 7 [ 225.762220] keychord: Insufficient bytes present for keycount 1 15:45:12 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x20002, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffcde) close(r1) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xe, 0x6211, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc40840a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x4, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000048}, 0x91) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5460, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r7, 0x5441, 0x7ff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 15:45:12 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:12 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:13 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) unlink(&(0x7f0000000400)='./bus\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./bus\x00', 0x6, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) fcntl$dupfd(r3, 0x0, r4) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x7) flock(r1, 0xd) sendfile(r1, r2, 0x0, 0xa5cc554) 15:45:14 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$int_in(r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x100100, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 15:45:14 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:14 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) [ 227.993784] audit_printk_skb: 48 callbacks suppressed [ 228.004468] audit: type=1400 audit(1575128714.121:421): avc: denied { create } for pid=10340 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 228.030244] audit: type=1400 audit(1575128714.111:420): avc: denied { create } for pid=10342 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 228.057908] audit: type=1400 audit(1575128714.181:422): avc: denied { create } for pid=10341 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 228.161530] audit: type=1400 audit(1575128714.281:423): avc: denied { create } for pid=10341 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:14 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:14 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 228.406043] audit: type=1400 audit(1575128714.521:424): avc: denied { create } for pid=10375 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:14 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 228.513148] audit: type=1400 audit(1575128714.631:425): avc: denied { create } for pid=10378 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:14 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) [ 228.738988] audit: type=1400 audit(1575128714.851:426): avc: denied { create } for pid=10389 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:14 executing program 1: socketpair(0x820eb2efe57541a3, 0x4, 0x78, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3c, &(0x7f0000000040), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000140)) clone(0x203102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_pts(r3, 0x2080) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) [ 228.776120] audit: type=1400 audit(1575128714.891:427): avc: denied { create } for pid=10341 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 228.849932] audit: type=1400 audit(1575128714.971:428): avc: denied { create } for pid=10341 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 228.882478] audit: type=1400 audit(1575128715.001:429): avc: denied { create } for pid=10393 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:15 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:15 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:15 executing program 5: pipe(&(0x7f00000000c0)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000001c0)) r3 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000540)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r5, 0x200004) sendfile(r3, r5, 0x0, 0x8000fffffffe) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c010000150000042abd7000fedbdf25ff020000000000000000000000000001ac1414bb0000000000000000000000004e2100004e200007", @ANYRES32=r4, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="030000000c00100001000000000000000800030000170000ac0007007f000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x9}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x7fff, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41}, {0xff, 0x20, 0x1, 0x0, 0x6, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3ff}, 0xae, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x2, 0x0, 0x80, 0x0, 0x8000}}, 0xe8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000380)={0x9, 0x1f, 0x0, 0x12000000, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0xffffff2d, 0x22}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = accept$inet(r8, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) ioctl(r9, 0x0, &(0x7f0000000300)='n') prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)) lsetxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0407000000113f5f527fe0a03fbe35"], 0xe, 0x1) 15:45:15 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:15 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:15 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/seliLux/p\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3f, 0x12) getpgid(0x0) write$FUSE_LK(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="73d0226db513bdba574a6696ccda0a40", 0x9, 0x0, 0x0, 0xe, 0x0, 0x7fffffff}, &(0x7f0000000180)=0x20) socket(0x6, 0x4, 0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fadvise64(r2, 0x0, 0x200, 0x7) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = open(0x0, 0x0, 0x1c0) syz_genetlink_get_family_id$nbd(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESOCT=r9], 0x2}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r10, &(0x7f00000000c0)='./file1\x00') 15:45:15 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x8000, 0x0) accept4$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c, 0xc00) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) eventfd2(0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0x200002, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/status\x00', 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000380)) r6 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5460, &(0x7f0000000000)) sendfile(r6, r7, 0x0, 0x1000) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) read(r8, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, &(0x7f0000000440)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x6e}]}, 0x18, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr, 0x400000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r12 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r12, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000100)={0x0, r11}) 15:45:15 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:16 executing program 0: creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sync_file_range(r4, 0x7b1d, 0xffffffffffffff51, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000040)='system_u:o\xe2ject_r\x05\x00ount_axec_t:s0\x00', 0x22, 0x0) 15:45:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_eee={0x22}}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x24c, 0x0, 0x24, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x108, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffcb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x180}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x290}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 15:45:16 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$P9_RREMOVE(r8, &(0x7f0000000240)={0x7}, 0x7) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4, 0x1, 0x7, 0x0, 0x19764, 0x20}) fdatasync(r8) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x0, r8}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x190, r12, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @empty, 0xffffffe0}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38c, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0xffff}}}}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4060}, 0x80) 15:45:16 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r7, 0x400454cc, r9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r11, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r11, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x5460, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r13, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r13, 0x0) ioctl$FS_IOC_GETFLAGS(r13, 0x5460, &(0x7f0000000000)) sendmsg$nl_netfilter(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000900)={0x1b7c, 0x6, 0x6, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x9}, [@nested={0x1004, 0x8b, [@generic="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"]}, @nested={0x100, 0x6e, [@typed={0x8, 0x32, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @typed={0xc, 0x26, @u64=0x7f}, @generic="39049e8ef8f99eb1c58cb3fce2da0fa65ed611aa90ea6ead51eeb0472cc321ec7e13", @generic="819f1b6aa2aa4ea1bff658b941ca85325bd51beacf204444764c4df2ab6769ca6e24e93c1d0a88f90c437742e705b7a5dc20d76cf671dcd438bf91c41677c349ef25cdd5f234111b2d7c5e46c6b56172b45e10bb4f41451b799c68468c2c3c", @typed={0x1c, 0x1, @binary="bb869a4e86f4c297ef6ffba8b139684321e7728c9f"}, @typed={0xc, 0x0, @u64=0x7}, @generic="71569fc97842b393f5a4ada02f62ae6d34cae46b8d262eddb643feeff5070549d80b10fdee6263724a741b746af046df909b0232b51e023971f038287c9fc8"]}, @nested={0xd4, 0x4f, [@generic="e901f0aa6ce9b117634fc00b6c837f30695c11bf7a7d63971874606d819e27bac4b92cfde69242445350343b792d6314d100be214392e38a221d15c94529f1373186611ab3c2a7856210b097589bc82d5edfb593cffe975b97265a5534da5e5cc198b8af05ebb298540bb4d0a2dc77fd06089ed91c9c821d585c2e3dc245744e0311769247ff321c1b5f9bc2fc7c83b88664ba2c906a5c31cfdf2900122f386017ac8dba0c2727f32f1e387f1cb0a84b5830b9821b4a5b54e276", @typed={0xc, 0x5f, @u64=0x3}, @typed={0x8, 0x54, @uid=r9}]}, @generic="ce975cbbd82db4da7738170f9a9571b2f96cabe5484f52f712f59a317df62bc24be9673d21797ccf7f456b9e6c648c479cb06965e304700cfd74c6d5d8d365d3911f49d3bce4afb93ef1a35f6a33f950151c95cc44ce65b8b50a6052071858d89f17ff6d0157b9fe84b48a2645bbe1e4c6e30a66784c6ebe290697daedbfd017affd086d3a7e773f3c5f798c0f", @nested={0x2a0, 0x10, [@typed={0x8, 0x2f, @ipv4=@local}, @generic="dc03fa6362fef2c3c5ed7b0df6378f17cb5c4aed4348abee87dc567d59ca723c712fb2972dcbf82dff7908b14f0ba13f7bb57da916a00daad78244f868f4eccab8132293bf2285a371f7b65ad5d9864dd2e1e3bbd857c026fca5acef5fb24dd508f2ab8b202b2f5969c31918c7c3fcaabf1c5a5802c7e0bd49c092543980ad87c9162bade36c1a642309f665cbc930c52e961f64f6699924f77f9ca8125162a7674c6415e32a20fbecfe13664473a4073b62beef8d82b0909ca1bfa9db84fa925199552b1aaa17fcfab02ea0af4838081d0df3741d7e729bf3340507d111d45660d768b45cf149765f3272497ac40a2b0ce058de14999a8364", @typed={0x8, 0x1c, @uid=r10}, @generic="ccd75dc51bee823787afcf2f266942022212f69307866ca7806f50b4b8512cb5c06a8c86500ee3c887c48fda5d790e4347d95e575bcaa0df7070dc3906b65d15636d436b80ab73c283622c7f807c0c270372cfa98124cb65127935b6541c83f927d2412ca391f9d0d9e33591950f3df8227d2786a27e975853dd83e1694814bcbb512a7b932ff310d6db0bf2c7e9ba6dd664ca7bb1d82503a2b9755ee80286edcf3bb0a42eaf566a007c558ce2fea12f7d34ef3c3527a5924a260d54b915876942e1a4906720b4dc94f225727a8a1685598199dd73b9891ddfff7f", @generic="3a77b85ad1e4662823c6214ac4050468c398c610bc9a97cfb8f804b65def50f847b5f5f6d30a342ed5ea4b4a84374632bd03dd23905c49d078a97c4390b4f60a74a97b6f80b5bc0e1e469440406864b65a9af03ee2ccc2b0876fd8576463e8af932449c822e4a4bbb85d61c469a2530f7e57f16668a7cd7e9e368871dd3a76b80c23f360bcbdedcacfb9eceed0b3101e8ebf6a5785d8596f8927d053ebe6e1a0b17d74d8fbd09d438c4130d5227b495d34df75ce73bd3a"]}, @nested={0x1c, 0x9, [@typed={0x8, 0x44, @uid=r12}, @typed={0x10, 0x3f, @str='/dev/ptmx\x00'}]}, @nested={0x240, 0x4b, [@typed={0x8, 0x2b, @fd=r13}, @generic="d65ac6cb4fc1768527719489bd924b1ca9597f2f09b04561267d59d55cc62669214eb6f69196eced00825cf6410f9c67d474b24cf0abc27f15cd6fe8c9fb92b20a00ce9e1873766761c069fc85d5a64e6c4c133d99f68956cdf7471d88fd8a2dcfd79c44a0e366000ed7e7cc9fe3a9e90f5b129bc7da21e0b66d5fabe6e7a1f8634e896f4208eeac2e847d78c626434c2feaac2c981ed1912177cb3549d7", @typed={0x14, 0x88, @ipv6=@empty}, @generic="f55ef0a579e1119bdf4eba7f9a3bf960098160e2350c5c6c477dc2cde3faa77a098754f2003d8de6b4aad5fc8b51ff7503c14d8af782f195850f65ff18f12adb2e5a0ce6084312d867cac268b8f2287cfb0e329edd13f038b4b3399ea0f6d3", @generic="38397109f02df5efa96c3d3bf6ce19990e7db2d44501bae0e4b708107461d68fddf5ab375ff0a0e8aa3d8a53b8f903f198028c5fa2a7229a91ab1d65243ce55be29b70083424c1f7be48f603730e2075ecff73e4d5a2ae91036289a80fe9a85297fd05f9a19888ddd1cc8fe320b58521d812a43a0b3f85ea0b9891f79ae9fd9c20e4e730ec15259c1fd1daccbc09fcd7b700b2283c9429e8270818c8904123d21cb0c46590a29daa2f70949ccddea59d06dc877f82f1d2ba", @typed={0x8, 0x63, @u32=0x9}, @generic="1e8fe56a7f1499cf15c4327cb01b7be28ef7840e1a905414589e387099b35f0e29dad01b0b8da8b0a7e81a215b106c615e75d0c2b4e8e7f18e4e96fb704adc22862016c39491bfad0e6fa8b063a97a68efdfd7fc13b0ccdbdd7b61ce42cac0c839"]}, @nested={0x3f8, 0x20, [@typed={0x4c, 0x77, @binary="ca168746e59e7727c84301973d4db0e5267c8071cbcf0074836e446f6898fccbb2c109a8cc6305ac5fd664880701e5466f79001f53af98291ec9bfcc113f17f795be3fe718ed582f"}, @typed={0xf4, 0x8a, @binary="e7fe8a2d991387329a35b88fd27e056dfe3c7a2e1f727dd60f0faec9215d4a7f9c01d4428011307e6b849a7d8946efece2911db9acdb1474c4cc7a4b82d6db8fe6662a5b2b4a0d4c1462e3463adc1b44afdea949394d74af6e5044646859c671c24760bb91ec70c4003010697d4d2a89fab501aacbecfc996f31cb3549ca279baa0242ee0caa0681c790cc1be5b1ad4cfc8f650e7f77f340de4cffd5fe56d2606df654512fbfe02b84ec556ee4dca1f3d435cb316515be6f35990d6f7a69f39a371d522a6167e3f76bf323681d5fed8962f9c4ef1eefab7f6536b196da3073deeece1ee69116df75fd68d874236425"}, @generic="5081d35c5412840b420890984a9e89c00ff3c0ddcaf0d29b4cdf94949fdc230cc082ece20a8aa5a8562e7cd1f1ea43a1ea0b3182fc26e5f9b801601e634321348ab2144c", @generic="2109bc569beb2af8211707c4456d0b0faeca176b66bd0b7bfb8cc67afc25d9081e5fbbfd3b8f44804307927142653d40af741680181e2b0264e40bea01800d92ded5ae705ad5a90beb87bbde89436969d3cc001874610455c2259e4f2b39eceb47a566ebfb76dfc9adaae0f00d6f784ff9dd53ea57f40ad007a9b35f599ab146907afd1f8cc4bc1530463893c48b8f32ea81f56109b78a96a8672f4de787", @generic="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", @generic="bf88a4628dd89674d953694f8b871b6b95c478cb259fd522b74b4eaecf7b4fe6d4441819cb0182c89e8ef5f5ddf08125abaec7fcb767174d1246c09f0b3154ce7512b2164d902c483f19b9e0fc61eb9ed2499e69637013a0339bb0b7a8d4384e386264688c6d2edf60c00b096c003f638ca099bdfb423a3106d1e69dbd95bfa937c5340bc4284412267f3fc567bf73f559e61b79b1cb881508e38cd46865f029032ceeec2f6b06a3aa0115fe6f05f0dab4d70eb9efb789bbb2bc2e1f0e9aeab1f9e08b3fd95330697a04fe", @generic, @typed={0x8, 0x2, @fd=r2}]}, @typed={0xc, 0x73, @u64=0x100000000}]}, 0x1b7c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x8893, 0x80000000, 0x6, 0x2, 0xfff}, 0x14) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r14 = eventfd2(0x0, 0x0) r15 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(0x0, r16) ftruncate(r15, 0x280080) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=[&(0x7f00000001c0)='/dev/full\x00', &(0x7f0000000240)='/dev/full\x00']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x2c280, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) sendfile(r14, r15, 0x0, 0x2008004fffffffe) 15:45:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) fcntl$dupfd(r2, 0x0, r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x800, @mcast1, 0x800}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'i0\xf2\x00\ae\xab\x86\x93\xe5\xcb\xcd6\b\xd6\x00\x00\x00\x00\x00\x00\xe3\x9e\x00', {0x200001}, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r1, 0x20) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:45:16 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x80001a, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 15:45:17 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:17 executing program 1: eventfd2(0x0, 0x0) r0 = socket(0xa, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) 15:45:17 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:17 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/prev\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r3, r0, 0x0, 0xa5a3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x26) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x10000, 0x9608befcff80eec1, 0x5}, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]) r6 = eventfd(0x0) fcntl$dupfd(r4, 0x0, r6) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 15:45:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x208200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) write$P9_RLINK(r6, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x100) fallocate(r7, 0x0, 0x0, 0x8e18) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) write$P9_RXATTRCREATE(r8, &(0x7f0000001440)={0x33}, 0x3) 15:45:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioperm(0x2, 0x207, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="040100001a0005020000000000000000362e047ce439a1b25362e1eca59bdfefac14142300000000000000000000000000000000000000960900000000000000", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="ff010000000000000000000000000001000004d52b000000ac1e0001000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 15:45:17 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:17 executing program 1: r0 = socket$inet(0x2, 0x4, 0x20) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "ab217f8031cf84e372f473da01ad5122310b4a2774b9805ee31f46c041ba2b32486affcf9489fa8fbc2348d6a0bf5522b6739b06e0ccaaeee384704a1570b56aa9b6cac31b557feb1369fee0bb159f270cdee581095fb23c0dc74415bcc34ea6d845e3635d29c7dd7268b5bae9076d640830924e27e439e916534a6a439f626514fdacfb17fcb5381cf1bf5992e873236de8fea62ffbd17e24fe0e103f33fad115fa91c85861d85162823ba531b2767f96aa7e78575477c3db134d20fb2cd28b8858b80f4c6c2e8441e50d2ef5501ed5fb817c539ca867a0d34a44bf0508161b1b51c8a297c2a0040c8ffc42830b2707d7fe8c"}, 0x103) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000001c0)=0x1) r2 = dup3(0xffffffffffffffff, r0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000440)={0x8, 'syz_tun\x00', {'netdevsim0\x00'}, 0x4}) write(r0, &(0x7f0000000480)="fea186d5204d4a2acacf618ad3b7f77cdd9006b67098153532feab42482ca8dc40f64de936342b5c3d3850277409dff4123e084922bc98415299fa46eaa4edabcd44cb8481a6706f2ef30d26a74dc448eb819e96991c95537059f85a43fd0509c4a0f601f1ae9820e83ee2fc8c2eb0462f35d4d331f35a1f604c9741ac908c", 0x7f) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000500)=0x800) fsetxattr$security_capability(r0, &(0x7f0000000540)='security.capability\x00', &(0x7f0000000580)=@v2={0x2000000, [{0xfffffffe, 0x8a4}, {0xb60, 0xa321}]}, 0x14, 0x2) r4 = getpid() waitid(0x0, r4, 0x0, 0x80000000, &(0x7f00000005c0)) socketpair(0xa, 0x0, 0x1, &(0x7f0000000680)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f00000006c0)={'filter\x00', 0x1000, "eaf33b8565ebb6867ef854741e91f913391e9c5d1505aaf101fbc2c33c0ecffdb9c2768ab212597111b24d415ef01e61958a16968485db5536f43778aeac15ea28650bef36e050ce735377d050fa77abcc557bec9df7648370de09af899b38970646056ee212ef1dfd5e40f48b99efb9670516bb849fa977cf5e18886340018aa9021b750f86f8206621e386132352330fb9f3adddac8c89d4d21113a359fcb2459aa9150967bafc4add23dbf4ab7d62530effc921a74fdc9bd368b3a37782ea21d750e0599cd5c87c112f73cb6099997e1f777ded029968b55fc35a6c8b6216de3881a1674ec645ca70970d42ad0466e244beb8c50478915700ce23cea5c6b4ef92455f8b6f73ffd4adaed531422233763538fa8b6d01d2a2d0c1f70ce132fd20c91bdfe1212db2c9ff88366a0718efed1a0077afa038f95ea7fd071c5b6b42fbca709eac23fec247c4ba3230454a9e415cee8983afb902a09cbf76a643df78b93a1e0fc6e85ff66131138d73f212b662d43b777a92d7652348de3e95126f0f07b130e18be6297c2fc7daf6186af77122be384e74bbc8414d0efe237d600c88673b1530e62ed30092b4c62451aba31e6ededcfbaf04aea5a03888f020bf30ff09c47d2dbd2fcef72a601b5334420d1c07b62bc03952f619c5811bf314c2628b47164060bbd0fe269665a5f390405f94093858e2edff8f73d6573d5e50bbebbf1b4222c6a53d8b4e4d0f8c49f080aaac447659f9c1307e9c30a149149d4b9b439ce2e4079a210d670434e4eb80d15de8431cffb730a655f2ca5eeae1c30d0d496086e5d81db66fe00f7228369f4b09177a2c6090f3d6fc2af4c95953ecc2e835927de25474393638fbf510de089f5619975697331571d960f124f44f9c42efcc78d85fee89d403e81770893c2fb474049a1d47b466663b5f70673f89a22e5420d62dae6f2ec4893c94c4de4f1df40cd9dde328b3274bb243df9c634fc08a43aa64744cbe0d9e21ac03e12c148a0f799705207f02cd66a79d5542e87e9435ccb61e232c3a4732725d3aa9082e1767f572443bc41e0c4859d3f8a879494d8df2a52eb24e624aa7fbda50f932310ace1d3ecd1a0b436ef4192621b5c230c1736acc849457b39696f9fbae5f15147436e419631360d1093389c2c7c78f5076e3e73b20c4bd6606f6eb2063616b2c8fc773f08d1e3eabdd9647c6e0dd95f6dc65fff8aac08becff66d5d0d8a29e8b950ef55e6bca786dc2760cd808bcec1cbf3a9d77e2b23678544324a35f795a5e56b532dde679500f8ec2cd628f1478a6989bf66fcf0bbcf4d8652983242a996fcfedcd967dc5b7321ee8c729d8543b8492fd6dc613fcf2ef9b87411375f329d642d240a57ea0ebc750e50345f4e120c227fa1f804935010be8f6e2d664303801e88ca7ef755771a1f50f73bf6b38cd858f23ef5cad5a6baa4de049eb88becdcaf5f0ab61830aaefd66f84c9c12d9ea52f13acd26024b48c8723cec43873c09f772cf8f7283af5591058db0be7dc95329d6d7c22c30a3731ba1085920286cba2091d577f07479a6aa669569c177a0c0bce77a868e32afe5e4e868e495d56d2786778612436f03b94c1c7e02057221b63bd6315291414fd2128ecfdd100deda76ded1c22e093e16a661faa36ee014a5b1d6c64fe9263cb516ec5fda2ddd5b74a17f2a1b3719b2f9bafcad48f1e4c7d7e8531b7225f135f1a2c6c5520c21fe9324324e916041cab2f086174e733376942c619319eb97ede8e759b53cd1ab57e1e50769bfeb99e91e967722456533da4badb303dac7e1d24c69f657f4c08834a87ea7a9cfccd3fd60d93f6ff242888eb0e8d54389a10d5d0c8bb9b88a5507e3eee74626ad2d247824d152f19d942866fbb9e2c3f86ae95afea9cc477eaea6885f76a90cb4a0767f4c28064fbdc52c9a1b607ad847aa5a3c3dbf0526270babba9d1cb8a05b854a83df353d9018f064b989ee9fae15296d8c6b650e3157ab16587352b72bb4ab5a5a121db461892a4d79d3d1e50d55843a45048705c0aca99506c76eae5df548cb0a2762e040dc383bb6bae277df19a5d31271b9b15a0a567c0eb09149427158d2a8ccddca2782e297e0b06f27ec160f8b75223844b851747ad92c8997b4b0f8432cfed1d3769b65c2f2d25b6eb6d0acdc45b85c1cc9ca77b7dd61389c9fdd32a43d456e5882ca9255cbfce19e8e86210c932c5a81a3713991bb1c1505f95de19b1c19718a09fcd99319f01156f81eb1b07488e360b11f03e73bf71a32bd42ffb050650e0ab38375523350b868e8028f761d39e0f61ade76411966cabf859e5feaf51c041e99eff8293a5fcc306572cbb9ff006658fc5451643558f11b88a54d5452d58bbdd93d4f77ab9b00c0335e87a5918bdc3e4a038ba1192bdcff4c8c6cdbc4bfbae06c6cc413911285e646c6d863b95865e97e9a299f1e3f125ad8f350960eb73381918a617897727e045e6b856ddfc9e5bac7f883b162678f40fa1a1f3d922b9432e8174199208b034fe7ade7250843db31bda478b147a4517589edfa6fd5f0a50965cbaf4f9fc5c4540eb5de7895e00c23aa8efc80f8f02f202feed7ebbf93b271d026b4b035e78db82fd4f5df74036336c6eba82184fef78b06d3a89adf1b0005a62642de22d9ba1e1d8524c20cca6b65ff840bba0aa2085228b4e68ce6e66950f85d56f4f1f23c1e49369bbce780d5cc98eee7dc1821a5e2dd82a733eed05357f6907cb86fef4bc503e38e98530c91c33c77e3d7c722341d74d3c506f1b9921bec0f2015cc79a6a536f6e6990973c4d11768087eb0bddb2631dc016c42fe95f6026f0ee3190ccec0700260ed0173b574e93c90b9ebfa39a9b909b5ef8fed8e5743e2460d85444c9c967e446442193154ef91bc58508f2951352068f15c6b241c0de5e02f6c3a1c209f2fc10cd18fa20f13bc47ae00211f06c56798773563aa33b69d26dd4158181b462f6a5d1df7e86ac354a18decbf8f4279182812ce55e6e9d22cbe9b03d06dbe5bb3bffe532b37c9c02dde204f6b6649eb402962177b12ee3081d9d7a6ec4086d859b189a941780cd231ff12011708357c3ac1b7d6690aefb9628201cc29789df19f432bbcc2311476fa87a8bf8a21f90803a3ef0d61075546a1da17287f8b2c2ff459d230e2bfacea5250398c87392c3396d1ebb51d925eb10f9142de8cee30a90d86007cb947825a53d3343c1a185765bd66c3b28d218eb228a44c44fcba7cf840bf477b5c1bc85acf936f2962339919035a1923fd09adc1a3a54d7ad67570181d942259b254a2b637850e5e8e84f523ffb5cfc4150143997534df207e257d625ad578412b2e723c3a4e9944d0a90225556d0c78a22ad08214edc218efff66e0504d30569987949e4aedf63f6545e7ac461385ef08349d956f7d6df613cf750fb9c8cf42239ecd7d2d12d2c7d61c6065b045612d6bb3483386f225099ecf380a620a45bb399fc1cb51940700c3a48f71aa3a2236bcc7e74ac9d8aa8269983f7e3cc5b0b968d6f6d9526bd4c920d1b3e1068130c89a33b80a4147423bb8958252df43c96c9ada3b3da8eba974746fcbc3503164d0d0114e22c71c431377ef1c3af455c9c044406df696007b6e891a3f40bd47a1010d67f7d77ae55fd8c0076a800fac639ce8ce1115da22660b460cb74c2989e710efb85711b51aae0b2d5f050784dcb7337989ea802a3f10c96a17ee87184a5565cf7272647247d3dd816d4f8069c9af25ba070a624e7d3e5132313497495199ab8ab5957a8e6a5a205b95d5076d52e51591074859dd1d7d8f051a94dc9830fe32fc57555a940a542aefe1529fd00d535905d686acd514ded488d148503274d89b922361fe89eca7e76e72003321988d4d6e86981518fa2815e8a3838fa79eed2bcc570788b32a02c109a7ba0d92803a8230a705fa0963586943ee01bd14872a22677a83adcfbaa7d2ed02615b167bfe3711f48848aa7fcbcd3560f72feed3532ac7a9871fd0ad28faf9b53a33aa9f8883c0ba524a27b461e711fc3af161eb51812f378f20a72cf0e2e986b5b4c229f690687202bae4f956b81374b4c26e488f3465083c132476741d83d7102f366fb5b17197cd31f7d17136111a8642ea82edac2f67d8ae178be814c6a249422b7bab5bf02d7bcd0f8cc8e8b550b9c4cd3d170a26e4a0cd8ebc4dfba4828cefb2107229616e838fa92d4f24d3f206b80cec760583e668ab8aa72dbed3efc1989d62db721326c1bcec702c0d3d461e5656b78785820c2c079286e03bd56da34d4866e110ca99c4349b85f1d8ed7a1d6a4303bd963588ea9cec2e6ce7387bf863c75a4263c23945e531d6bb6b776c741b9538b2baff093f422154f2256574ef23e59f9ccc01ce82e97ba56649ccbd9640b4eb5812b778c4a39179e02a8ca44f0a452b47ec5b5a75380c50917552b54a05f6370ad6a1a6a4d9c7380cce973fafa9183808d384c30ed213afd50d37b327cd76e770b319796f482757ba414d8baa85ff5e1fc66a407da2d08d872e217dfe62dc128c9b04573f30e7ad97e637ca584ea1847090841164dafcaf75a8138309a53a0776419bd3d305d78d0ad09213827081bc02301c8e58a718b8f86fe008771afa370e5627b8a1401736a087a3025d7ba93bdd289cda55f9151005f5566a3a4b8e4699dd681ff4584effb0d1ca3019fd67a66cb36ccc25cfa1bb02e5c870dc3ae8aff5e4873437cfd1e9be19ed87afa5a412861141971e583c496aead8e8f486c2d2cb6913194746037e667ff186cb38d0ef6d98c9cd62ce06e9d324088e5163917f5dbf66eef834e2b4238e77c4105081f46e1ccb39ff4f498305423f8e5f9e8c7b52d08d1bd2df7f4c9acec261e6c25cff7b317d7bc386fc893edc3d788d0c6140df4f0df97124dfd16070a4d732b09cc2b2e51d1702242a3e65ab5aec8cc69720c8d598c024994170ccf98f23b24014efb8f7d95915cae748c31bfb18666cf36f583197e53c6022f0ddcf12395aa28695830e83a375b0dce02f65d86cd71aa8c045f40d3d97e4a5630bba87d359ec5c00600b4bfbafad858e1484d3d0f816d9edbbe0a9c567b066cf69d6d58a19799db412191b58e1144ffdf6eb6ffbddf66d2ba8082d6d9eb0df2c8540488c363cfda3e385f2d74de2dc055743ea1ef11e4c8e75a321a45a5eec63c10ba000f228cdd3d31fe8bcc43a0b9e2faafafbdfa59934af6d25fa8c10944bb87ab71eb2452e1937649f0ff55e74e586578c58b29badb51232ba321f54f0dca3bb707c82d237b93d2aa973217d756146c325feed38f79799649bb1e0d96c26fd0ceb0a95a4fea0044da897924839167df4aca6e1292785a2d27138a13d12a18a009795ae55bb1335c27205980cfdba2eff4d00ac26c503308755c2d46d5e64c6572020ab789f2950ca05720884842b1b1f4d818883f3d241fbdf1f01772a906ea6a8564179c2dc2dc87ef26c70796f3f59ef5c9503a0ac1a49c1cc99085ae07599fdbd7787323a5434e28366b3c0e521dbaa82d7b47397815b95f73f9cd28cd72183f41c58b4a941d26f5763fc09ff59898c8c3bead8b3b85a44107c9623c9b80d229aa183b81f55f0f43442c85a0f269153bba57527f9725a7de64608cceb5587ee4791837b1b4ddbf02d00164ed400bc49d1e014418568a419a1b80421a8ffce87365f6f2d65b4649e8af13a6c61793c9b3a992220517081598b670184c3e5406693794e1892b7104e34cf9dc6517dc78924a21fa68a5243bbe33a67ee5e3ad3d67fc138f977e"}, &(0x7f0000001700)=0x1024) sched_yield() socketpair(0x3, 0x5, 0x4, &(0x7f0000001740)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000001780)={0x3, 'veth0_to_bond\x00', {0x8}, 0x3}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001840)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x5008010}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xe4, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xc8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x7, 0x60, 0x6, 0x2}, {0x8, 0x9a, 0x0, 0xe893}, {0x8001, 0x80, 0x7f, 0xff}]}}}]}}]}, 0xe4}}, 0x30000000) socketpair(0x5, 0x2, 0x1f, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000001a40)=@req3={0x3, 0x7, 0xfffffffa, 0x7fff, 0x3, 0x1ff, 0x8}, 0x1c) r9 = syz_open_dev$evdev(&(0x7f0000001a80)='/dev/input/event#\x00', 0xea18, 0x40) sendfile(r9, 0xffffffffffffffff, 0x0, 0xdce2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000001ac0)=0xe2, 0x4) r10 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/keychord\x00', 0x79ce41e4b76ea9a2, 0x0) ioctl$EVIOCGREP(r10, 0x80084503, &(0x7f0000001b40)=""/229) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001c40)='/selinux/checkreqprot\x00', 0x880000, 0x0) getsockopt$inet6_tcp_buf(r11, 0x6, 0x1a, &(0x7f0000001c80)=""/36, &(0x7f0000001cc0)=0x24) 15:45:17 executing program 2: pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) getgid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xfffffffffffffebd) fchdir(0xffffffffffffffff) r3 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="82363c3fed6f84", 0x7, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'\xe8\x00', 0x0}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$instantiate(0xc, r3, &(0x7f0000000340)=ANY=[@ANYBLOB="6e657720656372797074667320747275737465643a20303030303030303030303030db984f1d60b4262400d9877fe36d5ecf355a21f24111ac0d10f47800"/72], 0x2b, r7) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) [ 231.249513] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 231.272307] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket [ 231.354452] SELinux: policydb version -2139151957 does not match my version range 15-30 [ 231.438847] SELinux: policydb version -2139151957 does not match my version range 15-30 15:45:19 executing program 5: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(0x0, 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfffffcec) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f00000001c0), 0x8000fffffffe) io_setup(0xb0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) io_submit(0x0, 0x0, &(0x7f0000001cc0)) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000300)=""/65) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x218302, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x280401, 0x0) sendfile(r2, r6, 0x0, 0xa5cc554) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x800, 0x4dff8868581ae3ea, 0x9a54709542ddbaa7}, 0xfffffffffffffc62) 15:45:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x218000) r3 = openat$cgroup_ro(r2, &(0x7f0000000680)='m\xb7\xd3\x00\x00y.\t\x04at\x002\xe9\x8ei62\xad\xff\xc1M\x1e\x13\xf2Z\xc2\t\xcb\x13g\xbe\xb2\x16\xaa\xc7\xcc\xf4\x13\xd7?+g\xac\xd3S#\xc1\a}\x8f\x87\x10\xf29(;\xec\xef\xf1d\xf4\x97!\x181\x920\xab\x81\xa9I\xb3\xe1\xdb\x00\xc6X\xb2iVh\x17a\xe9\x81u2\xf4\xa3\x05c\x99\a\xad\xb1]\xac\x06\xc3\x98\b\xa4\xcc#\xf3\xe8\xae\xadfc\xfb\xf8\xc4g\xbc\x8b\x9e\xbb\f\xf2\xab\\qf\x06\n\xa2J)\x89\x83\xce\x81\xe6\x1a\xb1\x8a\x8b\x1f\x9e\xbf\\\xaa\xc3\xff\x15\xafJ\xea\xe8-Q+\x1f\x96x\x10\xf0\x06\a\xc5\x1e\xdb\xbd\xa4.\xf4Hc\xbe~\xc1\xb7\xff|\x9fq\x9aRF0\x94H(/\x0eq\x0e\x87{\\n7l*h\xdd\xb41d\xac{\x8eg\x91\x926@\xb2\x89j\x92\x8a(/+\t\xd1\xa5\xe5\x1e\x9fC\x8bQP\xf8\xec\x94-\x1c\xe3\xf8u\x8f\xe0\x12O\x9a\xac*\xc9w\xf4A\x18\x9f\xea\xd1\x9e\x93U<\x99|\x86\xae\x82T,\xacT\x9c{\xf3\xee\xa8[\x0eb\xb4z5G\xb7ym\xb3\xfb\xdc\xfd\x11a\xb6\xd5\x83\x9ac\xa1<\x14{\x9b\xd3\xd0X\xad\xec\x88\xd4\xe9\xdc\xdeT\xfc+\xf5\xa4DZG\xec\xbd)\x11wA\xefag\x9a\xdb?\x1c\x96\n', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 15:45:19 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x3e8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000240)="55b80595b26e9044679a109af9ea471c2a8c847fbc9bc5794a5e7bead90114475fd1fd38012724cc010e14d125942435b4aea4ec2a479c75b6da675fceecc01e20902d3e8b461c3619655cf8f59cc4562a4892cbd8e032e8", 0x58}, {&(0x7f0000000100)="8d902e538cfc", 0x6}, {&(0x7f00000001c0)="17fc100e574e0f8b4eec6537c755296f526efb6c070982590f7718bb66035488dc3699bc92", 0x25}, {&(0x7f00000002c0)="57af6555e776bdc1c0e1be4580cdfb595d22a25b9cbafc9f7d7b1f1b955e451f306a95b7a04b98f6b496c37433403c4da9c610883de8e756a6430f2dc09d37dd41dc6d5fb49341532861715bbb39b1f7113eab3ecd2946064caf43a18119dad55ad9e49a2b5dbba9c94238833dad5cbb18708949d3179f6162b0e42c13fa116a5c6bdf8fbdd42468ac09bba35f0fb0124d", 0x91}], 0x4, 0x5) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) sendfile(r1, r6, 0x0, 0x8400fffffffb) r10 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r10, 0x0) sendto$unix(r0, &(0x7f0000000580)="fe71378e537a2659f9b1d48eee51e2990d8c1338d6bd40e527f3227a6d9b18a1f9b012f9a1c149a3edd985cde9114131da33ccc9a87168670e75f4d3686a3c44e5bdc8bbc841f10da5a8dd5354a2b5a3bf1bb292769a1e4d6c5c93a6e976d23a3195edbe5758349de8f8669734c1e6907653ff1d2776d930c00aff835b5011aaf1bb02d94c1a2b20d6d23e491a4dd210efecfd7a6074489682df90970c0a71d71b", 0xa1, 0x40, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) read(r10, &(0x7f0000000180)=""/19, 0xfffffe47) 15:45:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', r3}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r3}) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/30], 0x20}}], 0x2, 0x0) 15:45:19 executing program 0: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='md5sum\x00') socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) 15:45:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10000, 0x0) 15:45:19 executing program 1: open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(r1, 0x10, 0x0) inotify_init() fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0x204) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)=@gcm_128={{}, '\x00', '\x00', '\x00', "000000db059f9200"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x4) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080)={'z\x00', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, r4) add_key(0x0, &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, r4) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x202142, 0x0) writev(r6, &(0x7f0000000380), 0x10000000000003cf) socket$inet6(0xa, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x0, &(0x7f0000000100)={0x1, 0x1, 0xd95, 0x20}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xcf) [ 233.411447] audit_printk_skb: 51 callbacks suppressed [ 233.431088] audit: type=1400 audit(1575128719.531:447): avc: denied { create } for pid=10593 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:19 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:19 executing program 0: mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aa5da85fe69389503d7f8279cfed593e0cd13bf506ccab0ba79ed526e8da4878dfebada6ac7751acf3791afa0cc28549ecc7e86ab3a422599e86329f98627fcc8629e31f9d76"], 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) symlink(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) stat(0x0, 0x0) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) flock(r3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) accept4(0xffffffffffffffff, &(0x7f0000000180)=@xdp, &(0x7f0000000340)=0x80, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000140)=0xfffffffffffffebb) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@loopback, @in=@local, 0x4e24, 0x7, 0x4e20, 0xce8, 0xa, 0x120, 0x40, 0x0, r5}, {0x5, 0x3f, 0x6, 0x81, 0x9, 0x0, 0x1, 0xfffffffffffff801}, {0x2, 0x8001, 0x8001, 0x7fff}, 0x68c6bbaa, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, @in6=@loopback}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 233.772464] audit: type=1400 audit(1575128719.891:448): avc: denied { create } for pid=10639 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:20 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 234.089866] audit: type=1400 audit(1575128720.211:449): avc: denied { create } for pid=10654 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x8, 0x10, 0x1, r3}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x26) fcntl$lock(r4, 0x4a, &(0x7f0000000200)={0x2, 0x1, 0x6, 0x144, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000480)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="937a7de9ccc866a3faf6cac06f5485057d99f85b3f6e6c75d67dffff50328d1657f59dc3a2d3a937eaa77718"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r9, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x5460, &(0x7f0000000000)) dup3(r8, r9, 0x1c0000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r10, 0x400454cc, r12) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r13, 0x400454cc, r15) r16 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r16, 0x400454cc, r18) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r19, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r19, 0x0) ioctl$FS_IOC_GETFLAGS(r19, 0x5460, &(0x7f0000000000)) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = eventfd(0x0) fcntl$dupfd(r20, 0x0, r21) dup3(r19, r20, 0x80000) r22 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r22, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r22, 0x0) ioctl$FS_IOC_GETFLAGS(r22, 0x5460, &(0x7f0000000000)) ioctl$TUNSETOWNER(r22, 0x400454cc, r18) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x2b2ca) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000080)=@generic={0x0, 0x100000000, 0xffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x10bd00, 0x0) ioctl$TUNSETIFF(r23, 0x400454ca, &(0x7f00000000c0)={'\x01\x00\xd9\xec\xe4\xfe\x8f\xb3\xdb_\x00', 0x110}) 15:45:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:20 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5460, &(0x7f0000000000)) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000380)=0x8000, 0xfffffffffffffdc4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fsync(r4) read$char_usb(r4, &(0x7f0000000640)=""/102400, 0x19000) read(r1, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xab53b20a69165e88, 0x32, 0xffffffffffffffff, 0x20000000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x1000000000000106}, 0x68) r5 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x0, r9}) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r10, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r11 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGBITSW(r11, 0x80404525, 0x0) ioctl$EVIOCSFF(r11, 0x40304580, &(0x7f0000000080)={0x52, 0x5, 0x6, {0x7, 0xf4b}, {0x5, 0x5}, @period={0x5c, 0xb18b, 0x0, 0x1, 0x6, {0x1000, 0xfbb8, 0xfffb, 0x800}, 0x8, &(0x7f0000000000)=[0x800, 0x7fff, 0x44f3, 0x40e5, 0x0, 0x2, 0x401, 0x0]}}) 15:45:20 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:20 executing program 2: r0 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8004700d, 0x0) geteuid() request_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x1000002a5) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = dup(r5) write$P9_RREMOVE(r6, &(0x7f0000000200)={0x7}, 0x7) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./file0\x00', 0x28) getsockopt$inet_mreqn(r7, 0x0, 0x0, &(0x7f0000000080)={@broadcast, @dev}, &(0x7f00000000c0)=0xc) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd700600dbdf280100000008000a004e22000008000600000001ff85cfefd839ebb2e7a9b562cb0c8fdd07f31b5c401027b59d063ea560e548905d48a06e44d6a3896d7c151cf5bb9d016b655267743b8f8f8732f86e68ded85199b54e1b6983aa8f539ebebdc3003e9ea56cd8cc9eff8fedcafc73c8054d810c9017b0765aa43341a182e87888bcf91fc67159a3318b9927d5cd40ed37749d4d80bbd80c6e57c93ea081986ef77793c2a0f6ef87af0eb48e60abc472f1cab1829fb95302b87a108c19c5497764a8dc31387f1366b977972c8d5ee181e406cf74dd079356c6f0b5ea72b8981552a8f9695b5811f687be"], 0x24}, 0x1, 0x0, 0x0, 0x49091}, 0x4000) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=""/177, 0xb1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000340)='./file0\x00', 0x115240, 0x80) r9 = open$dir(&(0x7f0000001280)='./file0\x00', 0x105000, 0x0) openat(r9, &(0x7f0000000000)='./file0\x00', 0x2042, 0x0) io_setup(0x9, &(0x7f0000000440)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000031c0)=""/4096) 15:45:20 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='\x00\x01ev%k\xe5ycW\xe5\xc0(\x00', 0x8000, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) clone(0x10802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0xb3be0efb97594d8f) tkill(r1, 0x36) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0xbd, &(0x7f00000000c0)=[{0x0, 0x179}, {0x0}, {0x0}], 0x3, 0x0, 0xfffffef9}, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0\x00') getsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) memfd_create(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f2, &(0x7f0000000380)) write(r4, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2) read(r3, &(0x7f0000000200)=""/250, 0xfffffe8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0xfffffffffffffdc3) r6 = inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000080)=0x7042) sync_file_range(r6, 0x5, 0x2, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/de/ptmx\x00', 0x419001, 0x0) socket(0x0, 0x2, 0x0) [ 234.320820] audit: type=1400 audit(1575128720.441:450): avc: denied { create } for pid=10666 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0x7, 0x6, [0x101, 0x7, 0x1000, 0x1, 0x4], 0x5e18}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="24000000180007041dfffd940c6105000a0000001f00000000000800040016000400ff7e280000001100ffffba16d5e945c2adceb15bc74d010a88581916a0aa1c0900000000000012000000", 0x4c}], 0x1}, 0x0) [ 234.368668] audit: type=1400 audit(1575128720.481:451): avc: denied { create } for pid=10669 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:20 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) pipe(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0x0, 0x0, 0x8, 0x2, 0x100}}) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001fde), 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept4(r4, &(0x7f0000000040)=@generic, &(0x7f0000000100)=0x80, 0x80000) fcntl$setstatus(r5, 0x4, 0x44000) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt(r7, 0x1, 0x800, &(0x7f0000000180)="7334b8dde8fb5d3d15232e086931aa935d90977886e3b5d9469d190c6c8bfad1e0b81175dbe2831f07bde790e936d5ee211e683aabb3753966ae2348b7b2582a536ba35de7a322390d47129c79", 0x4d) sendfile(r2, r3, 0x0, 0xa5cc554) 15:45:20 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 234.489114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 234.506990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:45:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x200}, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5460, &(0x7f0000000000)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x42) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x6, 0x1f8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 15:45:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x9) 15:45:20 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'team_slave_1\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x323) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r10, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x1c0000) preadv(r11, &(0x7f0000000600)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0xcf) readv(r3, &(0x7f0000000580), 0x25b) r12 = socket$inet(0x2, 0x80000, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(r12, 0x1, 0x3f, &(0x7f0000000180), 0xfffffffffffffeef) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x44000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f00000018c0)) r20 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x6102) io_setup(0xe24, &(0x7f0000000000)=0x0) io_submit(r21, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r20, 0x0}]) fstat(r20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x80, r24, r22, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) r25 = socket$inet(0x10, 0xa, 0xc) sendmsg(r25, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307051dfffd946fa2830020200a8009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) readv(r25, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000001c00)=""/188, 0xbc}, {&(0x7f0000001a40)=""/68, 0x44}], 0x6) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 234.665715] audit: type=1400 audit(1575128720.781:452): avc: denied { create } for pid=10705 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) [ 234.862079] audit: type=1400 audit(1575128720.981:453): avc: denied { create } for pid=10699 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:21 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 235.053864] audit: type=1400 audit(1575128721.171:454): avc: denied { create } for pid=10738 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 235.054896] audit: type=1400 audit(1575128721.171:455): avc: denied { create } for pid=10717 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 15:45:21 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 235.398621] audit: type=1400 audit(1575128721.521:456): avc: denied { create } for pid=10751 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:21 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x2797ef3f}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) select(0x40, &(0x7f0000000040)={0x1f, 0x6, 0x0, 0x0, 0x9265, 0x3f, 0x0, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x3f, 0x8001, 0x9}, 0xfffffffffffffffd, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='comm\x00') pselect6(0x19c, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x5, 0x5, 0x8, 0x100000000, 0x10001, 0x401}, &(0x7f00000002c0)={0x3, 0x0, 0x5, 0x40000000, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x0, 0x2004, 0x7fff, 0x0, 0x1, 0x40, 0xc03e, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={0x6740}, 0x8}) r3 = add_key$keyring(&(0x7f0000000100)='\x00\xec\xff\x00\x11\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$link(0x8, r3, r4) r5 = add_key$user(&(0x7f0000001700)='user\x00', &(0x7f0000001740)={'syz', 0x2}, &(0x7f0000001780)="16c857083c2d417c4c11bd3639c7bc78520dcb74e2c5f137d722eb54fb699b0a4c3f6320", 0x24, r3) keyctl$get_security(0x11, r5, 0x0, 0xfffffffffffffe56) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x8000fffffffe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f00000003c0), 0x4) getpeername$packet(r8, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000016c0)={'vxcan1\x00', r9}) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = inotify_init() inotify_add_watch(r11, &(0x7f0000000100)='./file0\x00', 0xfe) r12 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r13 = inotify_init() r14 = inotify_add_watch(r13, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r11, r14) r15 = dup2(r12, r11) getsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000005c0)=0x8) r16 = openat$cgroup_type(r12, &(0x7f0000000400)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r16, 0x41009432, &(0x7f00000004c0)="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") write(r15, &(0x7f0000000640)="94e74979e79dfb5a0b26008e92c2b484a3acbb977c0322fb81948eb282f418f78fe890eae4430e73edb0f0ef64ebf6fc93e3f4801d3ee4b154d5fa2abab08757672010edffda29cf8c6f9f615e77df9bccde5a852834b97ef44817af1daa6741b8685fa888e18c90b098d23ae0591a08e394cd5445aacd3f13fd53c64105a25c8401fe0dc4fa8ad776e6e8d674c13942dbae1a0e5f85de8980d887996c49d5beaa8b594f6cbddc195c5b51d191595d736147bd75b3b291802eec44808166f6461d1eb3c1dc627e843f2ccc5ca9c71431c3b51de5b4a7ee9a46f2b3f914a04453c235cfe54f4925237608ac82f8962b3f5a5e952dbc44fed3d4d92866ec0f30fd06da3eb70eb6b84e9ceacd27376e5dea93a1fad12ffe51e12991318c8d13aa843705f9821cdb8a2c948e78749fd6a4fd32a0bad5f174490de5c2f3785d965d8e664f5729cdeee48be6e6f4f4f91d24f9d9c573c94a5b558e6ca6e28338f71ac7aa8cbb00930eb115a9cf901367b4df4035d146c329a56ec0b8b1163540bcbece29a09bfd5ec4073243e04f69f9e82bebfb462b247c0781ecc0cc2f739d9020e6901e1d63bb8d8a9901b5675d4af6dc0e3184d0d90ca67b294ddb9dac1a4118bd63e1e368e59f7677c113b2ad78ba88f183de3ec66d835e3cf1b4095e56484def809bbd868ba80e36efe99a69fb9ecf50be8e51d2086bac91ab4f8ce61f2773efa4c5799ffc5b9cf96e29a16881d4f152769eb1cbfb1326438957d05a4de96ac42d309d6a66b9e1c4c90150dc5ab8a21fb79f43d834f04287b612485985e0c597e4a29822f518ab12df5d75cce8516da2f6d799fdfc3be1ad14f81e0f6b2982b8e0223f5a6746b660b56d347445ed7bbe7466243803b50a32aa388213077fac6f29c6bc2b0737195c71a8a17a2137b951b11d21b83b43765c083e0a091a813f920b0b332bfea5d60e5b5f2d8deb7c2becc4eba34697740b7fe218658407b1379476912c59ba99362cc11f167e063449fb5130362813b2de897515daf3b31b160cf381eb03c0f85ad522d98b7d1f8f8b299d9baa1d0b6a328e0e768307b2d05c79dc17ddbe8fe58408ecfd201d407c9ad437613b2d518edbcbe5b2aa23cf771b0e7129608d2e7a98657056b47921621b2e794b165212555428b77dfa647d9f0b6455878592225a14b890639541efb11f20f57ad05466f3ec80ec07c361dc194e747d358fa7b3b48a7e98e120567ec8131559dbf36e59b828dff1e7f9c188f072b3c36ee940138ee29ec122ac21e9ac7cde0fe39bae9f5045ff1e6521ff117fc520a00847eea720ce5d43fd3204273e7a18587ed57e87533442b43ee366850644d6787fec37544889b54f722ccc39e7f26c66bc5456ff295aeeddd855573bc403739bec2e95ed1ae5216ac47ed4dbde0612521fa5680b41e41ba1524c280e3f751c47bbfe65aa9603334475d3cdfd8ede8dfeadf0ea640b0ed1e48aaa3b5e5839fdb51ac920ccc7069cde976023dd57699eecafefce118cb7891a79b40bc26e519cc937d1a1fa208b431152e6f6034defc9f3a6598efecfebbf081c4ab46862a1c4e66f1acdaf02ed5aaa8d704436cd6cc5132e018abbdaf813d5693b6e40e88d4145f7455a273a7df1e141c454792a10295207471e31551699b0097c3202af436181a70691c74b63245c943109507f21bcf73905432a88cee355620d9d2da9f65b3b97d93cc43db3eaafe9b3285401c4b93c9cb7f0ed5e7b33edd185344ce5571b3223e75b8e1886cb977f52768ef515b490bda569d86377ed5f74ce98551a71121d864ba30ee150407bcfe038a53a2c3a08eb0195d9b616e64caafadb7e3423541e2b06ab849b37d0f0fb09b070a8548a2eec42dcd2aa517bb2b88b133ef4635c20d8b3b0c66c62da62a6f7d39a4e98ee377355dc0b2daf9ab9945999c65fc6cce0d165e97382d8d7bd29398a300237d825219c6c5c8bced20c54b13fbc51dcddef73bc2f05534068698ae35dd05b16068c5b4957af7b63356fdca642f3858f65b1d89a6978450ea6fd464a6ce421cf39dc52fc6c84b3cb4f2c20f50d239ff49ff286e1b9f8b50666c576b88b6641bf4f362f0632f5ec1da4d2a9aa3b19c6b4882825ddcb7ed0fd3c569af36fe0c9c466ffced287acd318a430b87e64f65315b6bdd8ab4c8aa7c0baeb9279f5d6cf33ca91f304d2f74324057e5e36653eea10a4b9f42256de636c6558787633c370a18a11738105d5de8a15a846524574731bf0775c8130f7b7ccbb3f308d66f24506b67cc541bef2aa87042cafcf0513106bdfa936d800730f60f4108d615728a4edc579d1bcc9f48254bd62676598e36affedf2ef4169336228ac6a6c778e9725f0c98ddf41cebcbddc5be21e95a6cb21f7e03e5dfd44783bbf748856d2a98fe34f830c0a669838630516c247fab2cf85e6b6a8f71fac6f720d75dd9c652cdb906407cdf3119d93f1c9dccf01e5f873f38305467c892e6d73defee696fe246629f0078f6f430f209469ae46d3ccf51e242b450e055f99d210f7753962c2cee317100cf0c31bd6d5588a161cf830a79fcc2b6e626a30c810aa2dd4ee31878a6702a44c4171e410b559975937deadc3191a8bd3aef9cf101e5ba92194fbbce13a8a28acad1dc659946fa52b300ec9e2816357243cc7694fa042ea02d30ce7743f3f4a74cbabccb2b689f6ac9e0b68df8b4cf90cf07f7c40642b5245b86b17d54037f52ed935cc141485ddda65f580b683fa8210a2418f083a1e973f01d9f130f463102f54933a097228d67809e2ef980956af305471f3da1b113bc240fcd12bb4065d0bd745637b373d441aca8edc217eb76e537b8a2216f0d3593367b35eb6538afa0f6190d439a9d0a94ddb8dd9f2a9f68ea1df29d8bb542f3b67f49040b017ee5e07980a71e44c9d5f24952e6fe66ed7b60292d27c148cdcbf508dd58397e95f1c619d689d26b52d4f007e986da0511c8acc721f3c63e0b296eef32a4d8e8cdd808aa280807ce33600dada125fb3355041e684596a5001552990beaa049fb2b42ee91740996092c54769610972255f50e40469ee02aa1523ee4e25153f2c502dd60a807284511fef40fb8b0bb08c495b286c8a5a65c3cce0411d0bf25c72fb89b1fed5e30081b3c222c3efd0df05406043ba652d93ad19d21ce6066a39173df71b2801113ae85c6fce9d29a595b595b4f34ffb19ae97de5feaaf87411d73476e81fb33bd58dfd4cd2f3c51fc5929d74b6a396d5ed54d74694531a3ae3768d5f9799aac46c2111f5a46feaeef430f35fda507ffb8b6e1565a133dc0fa5b4b76d3de84f5a36f100555b88f5173cdf68a6c6462de27960b99942c36977cbdd4c941231a3bb52f5df84a60dcc1c0206cb2b7238f900119528cdbac393c9ce142ca455c31a9a0303fa88c6c4689ee52a46cdd2390534809a90bc099359be894d928039c26764efeb704ac7c252cd3d85846dc0184044f82a3acc810d5f648eceb167208d68a50b4f933720c712bd4d5ddd653adedc53f33a0c39dc4f6cfd6451f448bd40f6531df4a360f7fbbf26e4ac56437030ba87d529f13aeb48608417bd5ec8ae2cd84c72ec31cbb3a50a507f8a06dca7f233dc2c592fd6b0d3015432c4d8de87abecca76847754ae14e13934641bf8529ce0ca020dd235a1c86fa801af81693097c4c6234ee1f9b74ddcc9c1bd903e4275a0e18ba60e45f891f42af292180857bc6f3b26040dc42e107c4706e67ca57e303431471838d33b1546d0171385a11bebb9902e666f0ecff4168ac82501a8147ef0426b5bc1b67dcf91c0c853b03883fc1f8f16ebfd65ac017ce0888e6f5b3cf0e46b3b1df6a9b9a70507a616435c766a30584cc65daaca3eae756fb213b57588c2ff4a1b54e5d03ca1c30748792043cc52e5f9fc5650a07260042fca46f29903efd67dbf46d255ea5d0319b9bf23a41837e2dce718f54a94091b9cdc53115f76d28e98bfaa35ed84643017af3291ec855063d437854202efc00f4486daed1a2dfeb6055811a9231e7b94dab8438daad2adf46887c4df1f7452c8f35b0ac0ae20596fbf9124d0a4afb1fe90f634884e05a1767f78e2e139bda1c9bd9016debbee924c9ffd4a9217485b5fbd9446044f28f49062590ddd3316043b010a735ff18be7350e33cc0032ac03bc3f7f923f9063d937337ba12d4f62d6ce90210a768eb1de88efc0753039157948bdd522719cd0ac47511a929ca785c3171e6141c5956f6a51ed7584186e6df87c998c6679889022d60344941baa38cb96ed4e064b595900d3809aa85ff40a20e951c25a70b4f078cfc1fe0a1ea4b8b78a989e177f3", 0xbfe) setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0002000000000000040100c910ff01001100000000b379f26337296b0b000000622db173ca9a177af8b0b259e5dbee00492a3dfec54984d30c0198d3ca990e8712a7ac3658c1007e6b9036229e10f6920a9b712486c396ed7d8938d61b829e69bd2c3ff32ffa79fbdb43eed3d1ffc21a53af1a4cb373ecce659bb707915332e9e27b2e1201008719d47e6902f4c881c43c0cef5679a939bbb019dccadf8d55a65867a9c0aec19bc801ebce2ee8321d9c204c4bf2bffe0000000000"], 0x20) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) 15:45:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x2ff, 0xe311, 0x6, 0x1, 0xffffffff, 0xffff, 0x9, 0x1}, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x7, 0x20, 0x9, 0x2, 0x9}, &(0x7f0000000100)={0x302, 0x1, 0x7, 0x7f, 0x8, 0x8001, 0x9, 0x9}, &(0x7f00000001c0)={r1, r2+30000000}, &(0x7f0000000240)={&(0x7f0000000200)={0x3}, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='selinux{\x00', 0x9, 0x2) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @broadcast}, {0x97c02367b3dcad0b, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x54, {0x2, 0x4e20, @multicast2}, 'ip6erspan0\x00'}) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) r6 = socket(0x8, 0x3, 0x4) write(r6, &(0x7f0000000000)="240000001a005f0414f9f407000904000a0000000000000000000000080019000000a08b", 0x24) 15:45:21 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:21 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:21 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/\x1dK\xaa\xca\n7]u\x00\x00\x00\x80', 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = eventfd(0x0) eventfd2(0x0, 0xb81bd37c228c521c) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) connect$packet(r7, &(0x7f00000002c0)={0x11, 0x3, r11, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000000c0)) 15:45:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) r3 = socket$inet6(0xa, 0x400000000001, 0x80) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, r4, 0x0, 0x80001d00c0d0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 15:45:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="add0ed638b56e84c1733d77f57652b28c42c7434d4312d1b375251bfc3c7971428547bdb3f557ab72f469aea5970db7c52429ac0a58196c44eb797ea044b8ecbe0ecb871033847a25ccb958edc3d9a33695e70c2ab8f50f63c2d01d74a797810de94bc1df1a82a07819ade2a6e469fbd", 0x70}, {&(0x7f0000000080)="f7e56c78eb422ca5a20889445ed4cecdd6faf6234a33a459c5961f88875c940632da1bfd0630e0506c32539b55b23b83c840832d411b2639e779d67efd75882bdefba67a8fb63e548b9fbe10ff6a384209ad56a01cb507b4dc32b6134ac1e2fce6972fd707ab960de6989d60082142c248b9652cb7490dc72c2ed5beff028f9e30eba2d9c9bda7951b27d767f1f7cb12edb10bd55c58d377874fc53ceb6c2be63f1c9e5e2c3f304480cddd29cb255cb2a69bc5a407ecce9a05", 0xb9}], 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006a80)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}, {{&(0x7f0000004ec0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000006340)=[@hopopts_2292={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 15:45:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000100)=@fragment={0x33, 0x0, 0x7, 0x0, 0x0, 0x9, 0x66}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000600)="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", 0xfdaa, 0x80, 0x0, 0xffffff9a) ioctl$void(r0, 0x5451) 15:45:22 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000005200190f00003fffffffda0602", 0x11}], 0x1) splice(r0, 0x0, r4, 0x0, 0x422000a78, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 15:45:22 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00w\x06S*6\xee\xa8?\xbd\xc1\b\x10s\xe3\xc76\x87\x7f\xb9\x1e-\xcex\x18k\xb9h\x9f\xe6\xe5g\xc0Q\xc8\xc5\xcb\xe7\x05\xd1A\xde\xa5\n\xcc\xfb\xa4-\xde\xa6v\xac\x9aw\x89P\xc7,\x1e\xf7\xfa\x1f\xa5\ak\xb8\xd6@n,H\x06E\xd3\fm\xe3\v\xadD\xe5\xe7\xaf\x85T\x85\x9a\xce\xcb\x8a\x01T,]\xbe\x06C|\xe8\xba\xfe5\xdaJ8\xb9[\xbbW\x9ei}Y\xfb\xb5\xc7\x97y\xf3>\x05+\t\x1f\x1bM\xdcM\xd2\x95\xd2F\xb6\xe6&\xa8\x84J\xe6\x15\x7ft\x9a\xe3\xcfB\x84\xa2o)\x92\xfa\xe1\x8bR6Sq\x01\x93\x8cV\xf2#!\xb2 \xdf\x00!S\x9f\xef\xf0\x05\xc6\xf9\x04\x88\\\x05\x93\x99}\x95\xde\x94f\xa6G\\\v:\xee\x80)\x87\xb9\xe0\x87}(a\x8a^e(\xe0\xfcl\xbb~\x03\x1fq\xd2\xfeD\x8a\x13\x92e\xe6\xf9\xae:&H\xa6\xd8\x8arT\x84\xa5XN4\xf2\xf9\xad\x9f\xdf\xbf<\xd7\xf6', 0x200002, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440), 0x12) socket(0xa, 0x800, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000640)="06c5f4fe84a1a8f02c7043aa4f00", 0x10) socket(0x18, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @rand_addr=0x4}}, 0xffffffffffffff40) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x325) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={r4, r6}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="900100001400000429bd7000fddbdf257f0000010000000000000000000000007f0000010000000000000000000000004e24ffc14e210101020080b000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x4800}, 0x20044) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r8 = open(0x0, 0x8240, 0x8) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000413) write$cgroup_type(r7, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) r9 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f00000000c0)='./file0\x00') mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x161800, 0x180) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = eventfd(0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) renameat2(r12, &(0x7f0000000340)='./file0\x00', r0, &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 15:45:22 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 236.009436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 15:45:22 executing program 0: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="65957e10c90a5e60410a3f01757ef37982cb6e179350e2ee5bfaacee558fffbf2a88d9b6d97ab1c002275fffbc0d9236ee18e9564abd31f1b52cf30386a735c4054d79d971013d860569ad5bd434ca342b28d84f285ba06e6501601c6b7dbf9fedc5b2ea32624eb8b226279fc37239d87dd78e16c471aa634d993590ba9766b5db66813a4a7c605b57a568b5c20119a2975303b3aa1a73e6d3661d53"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) accept(r1, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) close(r0) 15:45:22 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x180c00) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e20, @local}, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x5d, 0x4010}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0x12c, 0x33) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)="e0da49c4615815302e8120e623517a015fb6bdd4ad3b90e5c0b691cbd0d85c0892325a61e8cb26b7e63ffb14c325af6ed5d9e02dc2223aa6f1e049b611737a22ec024b6e5abd78313886dc4b040073bd0abf6f9e1af3be99fe166c676ede10f16e138e8188efb2f60098b2c78d69dd803620aa654cd475da393d47a736476c2cb937435aec501070ddd9be", 0x8b, r2}, 0x68) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x1269, 0x101, 0x8}) 15:45:22 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:22 executing program 0: read(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x79bd8194dadd67b9) openat$tun(0xffffffffffffff9c, &(0x7f0000001440)='/d#v/net/`u\x03\x00', 0x501000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000001480)) dup(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5709008759781a6800", @ANYRES16=0x0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40001) sendfile(r1, r4, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r6, &(0x7f0000001880)=ANY=[@ANYBLOB="e5826d421d3b703d80db7f8a0000180000005ec5c380ffb361b39760387b0000000043e1a5ac1ddea9c2941616343c4cfef09142ac271a7c45bde540876629ecda33804eafc0d09bff7b415eb2b40ef90fdad9560d81402cd76843a527db5387bcdfefaacf85aed200000000000000000000000073dfb97fa8d470501ac7b7"], 0x87) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) poll(&(0x7f0000001200)=[{r5}, {r2, 0x1480}], 0x2, 0x1) socket$inet6(0xa, 0x0, 0x4) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r7 = socket$key(0xf, 0x3, 0x2) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file1\x00') write$selinux_context(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29) sendmmsg(r7, 0x0, 0x0, 0x0) r9 = open(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002780)={{{@in=@multicast2, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0x24d4fd88) setsockopt$packet_drop_memb(r9, 0x107, 0x2, 0x0, 0x0) [ 236.408226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket [ 236.428847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket 15:45:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:22 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x100, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400106}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88080}, 0x4000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth0\x00', 0x202}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr="d8e74350ac77cede7b0cf252877e82fb", 0x30, r3}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={@local, 0x0, r3}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev, r3}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5460, &(0x7f0000000000)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = eventfd(0x0) fcntl$dupfd(r8, 0x0, r9) getsockopt$inet6_mreq(r8, 0x29, 0x32, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) setsockopt$inet6_mreq(r7, 0x29, 0x9, &(0x7f00000001c0)={@loopback, r10}, 0x14) 15:45:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:23 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x9) 15:45:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) writev(r0, &(0x7f0000002640)=[{&(0x7f00000001c0)="06", 0x1}], 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) write$cgroup_type(r7, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r7, r8, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r9) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0xc0000) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0x7c) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030312c757365725f69644fb2a5c487b7a99de9a856c69420ccdf107dd8e1a9ce679f86e0ba136a375521ce091fcc3f8147fa01e23c6c72aafcf63a0bb10d9a2c5f45705bb77e89a4886257c7dbc1d915ebdbfe8af82a84621f7b9d356ed2b572da00499f44af5eb9d50b38a4480825c7be6101f4d23449d9e87f82e58a6dca622d036b", @ANYRESDEC, @ANYBLOB='\x00'/10, @ANYRESDEC=r9, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e2f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r11, @ANYRESDEC, @ANYBLOB="2801"]) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) fcntl$dupfd(r12, 0x0, r13) signalfd(r12, &(0x7f0000000200)={0xff}, 0x8) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = eventfd(0x0) r16 = fcntl$dupfd(r14, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) write$P9_RGETATTR(r16, &(0x7f0000000040)={0xa0, 0x19, 0x9, {0x400, {0x9b, 0x40000001, 0x5}, 0x4, 0x0, r9, 0xfa, 0x4, 0x1, 0x400, 0x40, 0x5, 0x800, 0x7fffffff, 0xffffffff00000000, 0x4, 0x7, 0x9, 0x2, 0x0, 0xe0b}}, 0xa0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = eventfd(0x0) fcntl$dupfd(r17, 0x0, r18) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = eventfd(0x0) fcntl$dupfd(r19, 0x0, r20) r21 = dup3(r17, r20, 0x100000) dup2(r21, r0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x1004000000015) 15:45:23 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_load(r0, 0x0, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000160007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:45:23 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000009347bec10777a6ef7bf6f3600000010000020000000000020001000002000000000002d6b3f83ca344a2bd000000000300050000"], 0x50}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r2, &(0x7f0000000140)=0x20000100000001, 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="104988e155d4f3832bbea5fed0e42b47e96e903bdb013e3ea4bde6e1b85110beabc1b8d8dc8d54912934ccb3e9c88ebd0be241bf6f8741f9e1a6f1504fe3e80fbe95320a1093a9e5d9bcb297a8204f0f53657f99fe5cbb558fb4c20fc0f5148fa8b879fe830c5935a308f3e0c0365c5fed3e6309443452fb9b577b96f31da37b957a61d88b70335ac5d6ce7584cdff19e907cd8116947c6af57d725baa8172cc98e694b31b69ad6420163c29c20a5566c463cece94aed34dd1256cad89e0ceb31e", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={0x108, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37fa2a32}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffff7db, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x41110}, 0x4040000) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x76a3505cf16affcf}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @rand_addr="a6b0983c30d4d27854c577c3d8a8e345", 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4020) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x1) [ 237.651065] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 237.652013] vmalloc: allocation failure: 0 bytes [ 237.652018] syz-executor.1: page allocation failure: order:0, mode:0x24000c2 [ 237.652028] CPU: 1 PID: 10918 Comm: syz-executor.1 Not tainted 4.4.174+ #4 [ 237.652040] 0000000000000000 b832859b72708ae0 ffff88006bc8f9f0 ffffffff81aad1a1 [ 237.652050] 1ffff1000d791f41 ffff8800b8c4df00 00000000024000c2 0000000000000000 [ 237.652059] ffffffff82895080 ffff88006bc8fb00 ffffffff8148c0cb ffffffff00000001 [ 237.652061] Call Trace: [ 237.652076] [] dump_stack+0xc1/0x120 [ 237.652086] [] warn_alloc_failed.cold+0x78/0x99 [ 237.652094] [] ? zone_watermark_ok_safe+0x290/0x290 [ 237.652102] [] ? sel_write_load+0x9e/0xf90 [ 237.652110] [] __vmalloc_node_range+0x365/0x650 [ 237.652118] [] ? check_preemption_disabled+0x3c/0x200 [ 237.652125] [] ? check_preemption_disabled+0x3c/0x200 [ 237.652131] [] ? task_has_security+0x130/0x270 [ 237.652138] [] vmalloc+0x5c/0x70 [ 237.652144] [] ? sel_write_load+0x119/0xf90 [ 237.652151] [] sel_write_load+0x119/0xf90 [ 237.652158] [] ? sel_read_bool+0x240/0x240 [ 237.652167] [] ? trace_hardirqs_on+0x10/0x10 [ 237.652174] [] __vfs_write+0x116/0x3d0 [ 237.652180] [] ? sel_read_bool+0x240/0x240 [ 237.652191] [] ? __vfs_read+0x3c0/0x3c0 [ 237.652199] [] ? check_preemption_disabled+0x3c/0x200 [ 237.652205] [] ? check_preemption_disabled+0x3c/0x200 [ 237.652214] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 237.652221] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 237.652231] [] ? __sb_start_write+0x14f/0x310 [ 237.652239] [] vfs_write+0x182/0x4e0 [ 237.652246] [] SyS_write+0xdc/0x1c0 [ 237.652254] [] ? SyS_read+0x1c0/0x1c0 [ 237.652266] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 237.652276] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 237.652279] Mem-Info: [ 237.652296] active_anon:692402 inactive_anon:6297 isolated_anon:0 [ 237.652296] active_file:4960 inactive_file:19373 isolated_file:0 [ 237.652296] unevictable:4 dirty:222 writeback:6 unstable:0 [ 237.652296] slab_reclaimable:5735 slab_unreclaimable:65892 [ 237.652296] mapped:61466 shmem:7452 pagetables:9574 bounce:0 [ 237.652296] free:771330 free_pcp:474 free_cma:0 [ 237.652329] DMA32 free:1394776kB min:4696kB low:5868kB high:7044kB active_anon:1275628kB inactive_anon:12108kB active_file:9872kB inactive_file:35548kB unevictable:16kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:16kB dirty:624kB writeback:20kB mapped:114332kB shmem:14428kB slab_reclaimable:10636kB slab_unreclaimable:121160kB kernel_stack:5760kB pagetables:17420kB unstable:0kB bounce:0kB free_pcp:712kB local_pcp:616kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no 15:45:24 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x9) [ 237.652337] lowmem_reserve[]: 0 3504 3504 [ 237.652368] Normal free:1690544kB min:5580kB low:6972kB high:8368kB active_anon:1493980kB inactive_anon:13080kB active_file:9968kB inactive_file:41944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:264kB writeback:4kB mapped:131532kB shmem:15380kB slab_reclaimable:12304kB slab_unreclaimable:142408kB kernel_stack:8448kB pagetables:20876kB unstable:0kB bounce:0kB free_pcp:1184kB local_pcp:732kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 237.652375] lowmem_reserve[]: 0 0 0 [ 237.652421] DMA32: 82*4kB (UME) 84*8kB (UME) 67*16kB (M) 79*32kB (UME) 72*64kB (UME) 26*128kB (UM) 15*256kB (UM) 10*512kB (UM) 5*1024kB (ME) 2*2048kB (UM) 333*4096kB (M) = 1394680kB [ 237.652465] Normal: 89*4kB (UM) 50*8kB (UM) 52*16kB (UME) 121*32kB (UME) 70*64kB (UME) 29*128kB (UME) 24*256kB (UME) 11*512kB (UME) 4*1024kB (M) 1*2048kB (E) 405*4096kB (M) = 1690452kB [ 237.652467] 31784 total pagecache pages [ 237.652471] 0 pages in swap cache [ 237.652475] Swap cache stats: add 0, delete 0, find 0/0 [ 237.652477] Free swap = 0kB [ 237.652480] Total swap = 0kB [ 237.652482] 1965979 pages RAM [ 237.652484] 0 pages HighMem/MovableOnly [ 237.652486] 313294 pages reserved [ 237.707955] vmalloc: allocation failure: 0 bytes [ 237.707962] syz-executor.1: page allocation failure: order:0, mode:0x24000c2 [ 237.707972] CPU: 1 PID: 10918 Comm: syz-executor.1 Not tainted 4.4.174+ #4 [ 237.707985] 0000000000000000 b832859b72708ae0 ffff88006bc8f9f0 ffffffff81aad1a1 [ 237.707995] 1ffff1000d791f41 ffff8800b8c4df00 00000000024000c2 0000000000000000 [ 237.708005] ffffffff82895080 ffff88006bc8fb00 ffffffff8148c0cb ffffffff00000001 [ 237.708007] Call Trace: [ 237.708020] [] dump_stack+0xc1/0x120 [ 237.708030] [] warn_alloc_failed.cold+0x78/0x99 [ 237.708039] [] ? zone_watermark_ok_safe+0x290/0x290 [ 237.708047] [] ? sel_write_load+0x9e/0xf90 [ 237.708055] [] __vmalloc_node_range+0x365/0x650 [ 237.708063] [] ? check_preemption_disabled+0x3c/0x200 [ 237.708070] [] ? check_preemption_disabled+0x3c/0x200 [ 237.708076] [] ? task_has_security+0x130/0x270 [ 237.708083] [] vmalloc+0x5c/0x70 [ 237.708090] [] ? sel_write_load+0x119/0xf90 [ 237.708096] [] sel_write_load+0x119/0xf90 [ 237.708103] [] ? sel_read_bool+0x240/0x240 [ 237.708111] [] ? trace_hardirqs_on+0x10/0x10 [ 237.708118] [] __vfs_write+0x116/0x3d0 [ 237.708125] [] ? sel_read_bool+0x240/0x240 [ 237.708131] [] ? __vfs_read+0x3c0/0x3c0 [ 237.708138] [] ? check_preemption_disabled+0x3c/0x200 [ 237.708144] [] ? check_preemption_disabled+0x3c/0x200 [ 237.708153] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 237.708160] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 237.708167] [] ? __sb_start_write+0x14f/0x310 15:45:24 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 237.708174] [] vfs_write+0x182/0x4e0 [ 237.708181] [] SyS_write+0xdc/0x1c0 [ 237.708193] [] ? SyS_read+0x1c0/0x1c0 [ 237.708202] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 237.708212] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 237.708216] Mem-Info: [ 237.708235] active_anon:692427 inactive_anon:6297 isolated_anon:0 [ 237.708235] active_file:4960 inactive_file:19373 isolated_file:0 [ 237.708235] unevictable:4 dirty:222 writeback:6 unstable:0 15:45:24 executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2}, 0x4) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="c74c9d60e2e2d9469e57b09b2c60a7fad613f567d6d3268bc7e9acc1c5a1a5a1c31ab83410948749f6b39efc0040c7f4d3884ced8cf04699d914d248461dfeda2aca", @ANYRES16=r5, @ANYBLOB="16dc29bd7000fddbdf25010000000c00020003000000000000000c00080005000000000000000c000400ffffff7f000000000c00020005000000000000000c0006f0e02f1bace40000000c00060001000000000000000c0004000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x20040, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r10, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x5460, &(0x7f0000000000)) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r6}, {0x8}, {0x8}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = fcntl$dupfd(r0, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6(0xa, 0x2, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = eventfd(0x0) r16 = fcntl$dupfd(r14, 0x0, r15) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) connect$inet6(r16, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) sendmmsg(r13, &(0x7f00000092c0), 0x4ff, 0x0) [ 237.708235] slab_reclaimable:5735 slab_unreclaimable:65892 [ 237.708235] mapped:61466 shmem:7452 pagetables:9574 bounce:0 [ 237.708235] free:771298 free_pcp:468 free_cma:0 [ 237.708262] DMA32 free:1394648kB min:4696kB low:5868kB high:7044kB active_anon:1275728kB inactive_anon:12108kB active_file:9872kB inactive_file:35548kB unevictable:16kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:16kB dirty:624kB writeback:20kB mapped:114332kB shmem:14428kB slab_reclaimable:10636kB slab_unreclaimable:121160kB kernel_stack:5760kB pagetables:17420kB unstable:0kB bounce:0kB free_pcp:688kB local_pcp:592kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 237.708270] lowmem_reserve[]: 0 3504 3504 [ 237.708302] Normal free:1690544kB min:5580kB low:6972kB high:8368kB active_anon:1493980kB inactive_anon:13080kB active_file:9968kB inactive_file:41944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:264kB writeback:4kB mapped:131532kB shmem:15380kB slab_reclaimable:12304kB slab_unreclaimable:142408kB kernel_stack:8448kB pagetables:20876kB unstable:0kB bounce:0kB free_pcp:1184kB local_pcp:732kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 237.708309] lowmem_reserve[]: 0 0 0 [ 237.708354] DMA32: 82*4kB (UME) 84*8kB (UME) 67*16kB (M) 78*32kB (ME) 71*64kB (UME) 26*128kB (UM) 15*256kB (UM) 10*512kB (UM) 5*1024kB (ME) 2*2048kB (UM) 333*4096kB (M) = 1394584kB [ 237.708398] Normal: 89*4kB (UM) 50*8kB (UM) 52*16kB (UME) 122*32kB (UME) 70*64kB (UME) 29*128kB (UME) 24*256kB (UME) 11*512kB (UME) 4*1024kB (M) 1*2048kB (E) 405*4096kB (M) = 1690484kB [ 237.708400] 31784 total pagecache pages 15:45:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_load(r0, 0x0, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000160007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 237.708404] 0 pages in swap cache [ 237.708408] Swap cache stats: add 0, delete 0, find 0/0 [ 237.708410] Free swap = 0kB [ 237.708412] Total swap = 0kB [ 237.708414] 1965979 pages RAM [ 237.708417] 0 pages HighMem/MovableOnly [ 237.708419] 313294 pages reserved [ 238.501425] vmalloc: allocation failure: 0 bytes [ 238.506577] syz-executor.1: page allocation failure: order:0, mode:0x24000c2 [ 238.518634] CPU: 0 PID: 10943 Comm: syz-executor.1 Not tainted 4.4.174+ #4 [ 238.525697] 0000000000000000 bdbb6b245e254241 ffff8801d45379f0 ffffffff81aad1a1 [ 238.533851] 1ffff1003a8a6f41 ffff8800b6462f80 00000000024000c2 0000000000000000 [ 238.542315] ffffffff82895080 ffff8801d4537b00 ffffffff8148c0cb ffffffff00000001 [ 238.550680] Call Trace: 15:45:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r9 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, 0x0) write$cgroup_type(r8, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r8, r9, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r11, @ANYRESDEC, @ANYBLOB="2801"]) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) fcntl$dupfd(r12, 0x0, r13) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r16, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r16, 0x0) ioctl$FS_IOC_GETFLAGS(r16, 0x5460, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) r18 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) r20 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r21 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r20, 0x40086602, 0x0) write$cgroup_type(r20, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r20, r21, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r22) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r21, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r22, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r23, @ANYRESDEC, @ANYBLOB="2801"]) r24 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r25 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r24, 0x40086602, 0x0) write$cgroup_type(r24, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r24, r25, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r26) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r25, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r26, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r27, @ANYRESDEC, @ANYBLOB="2801"]) r28 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r28, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r28, 0x400454cc, r30) r31 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r32 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r31, 0x40086602, 0x0) write$cgroup_type(r31, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r31, r32, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r33) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r32, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r33, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r34, @ANYRESDEC, @ANYBLOB="2801"]) r35 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r35, 0x400454ca, &(0x7f00000001c0)={'r\x00', 0x10000008000002}) r36 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r35, 0x400454cc, r37) r38 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r39 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r38, 0x40086602, 0x0) write$cgroup_type(r38, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r38, r39, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r39, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r40, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r41, @ANYRESDEC, @ANYBLOB="2801"]) r42 = geteuid() getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) r44 = geteuid() r45 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r46 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r45, 0x40086602, 0x0) write$cgroup_type(r45, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r45, r46, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r47) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r46, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r47, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r48, @ANYRESDEC, @ANYBLOB="2801"]) r49 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r50 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r49, 0x40086602, 0x0) write$cgroup_type(r49, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r49, r50, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r51) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000f40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r50, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r51, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r52, @ANYRESDEC, @ANYBLOB="0fa6d242813cf50cc363c051e8c728"]) r53 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r54 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r53, 0x40086602, 0x0) write$cgroup_type(r53, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r53, r54, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r55) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r54, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r55, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r56, @ANYRESDEC, @ANYBLOB="2801"]) r57 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r58 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r57, 0x40086602, 0x0) write$cgroup_type(r57, &(0x7f00000000c0)='threaded\x00', 0x100000198) sendfile(r57, r58, 0x0, 0x8000fffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, 0x0, r59) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='fuse\x00', 0xd6beba02c67dfffb, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r58, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r59, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030344b18e282f4f20dac089b88001d2c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030352c616c6c6f775f6f746865722c6d61785f726561643d30783030303030303030", @ANYRESDEC, @ANYBLOB="2c61756469742c6673757569643d30353100637c02312d000339312d903266352d363364622d63343466666534b02c7569643c", @ANYRESDEC=r60, @ANYRESDEC, @ANYBLOB="2801"]) getgroups(0x8, &(0x7f0000000840)=[0x0, 0xffffffffffffffff, r47, r51, 0xffffffffffffffff, 0xee01, r55, r59]) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)={0x6a8, 0x0, 0x2, [{{0x0, 0x2, 0x80, 0xb686, 0x2, 0x9000, {0x5, 0x8000, 0x6, 0x0, 0xffffffff, 0x2c3, 0x4, 0x7, 0xffffffff, 0x0, 0x5, r3, r4, 0x1, 0x81}}, {0x6, 0x0, 0x10, 0x3, 'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00'}}, {{0x2, 0x2, 0x1, 0x5, 0x800, 0x5, {0x0, 0x5, 0x7f, 0x9, 0x6, 0x9, 0x6, 0x1, 0xda5, 0x6, 0x7ff, r7, r10, 0x2, 0x80000001}}, {0x4, 0x6, 0xe, 0x6, 'cpuset\'-cgroup'}}, {{0x6, 0x2, 0x3dae, 0x3, 0xc2, 0x6, {0x6, 0xffffffffffff8001, 0x3, 0x8, 0x800, 0x9, 0x3, 0x3, 0x907e, 0x3, 0x3, r14, r15, 0x7, 0x1000}}, {0x2, 0x40, 0x11, 0x297, '.cpuset:security$'}}, {{0x2, 0x1, 0x8000, 0x9215, 0xfffffffb, 0x2, {0x6, 0x2, 0x8, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7fff, 0x0, 0x9, 0x4, r17, r18, 0x8000, 0x800}}, {0x4, 0x1, 0x2, 0x0, '(#'}}, {{0x6, 0x0, 0x7fff, 0x8000, 0x1, 0x8c, {0x6, 0xc1, 0xfffffffffffffff7, 0x4, 0xd54, 0xfffffffffffffff7, 0x1ff, 0x5, 0x3, 0x9, 0x8, r19, r22, 0x0, 0x4}}, {0x1, 0x7, 0xd, 0x20, '/dev/net/tun\x00'}}, {{0x2, 0x3, 0x3, 0x2, 0x2, 0x81, {0x3, 0x0, 0x3ff, 0x2, 0x100000001, 0x1, 0x9, 0x1f, 0x800, 0x81, 0x3, 0xffffffffffffffff, r26, 0x9, 0x8001}}, {0x6, 0x8, 0x1e, 0x0, 'selfkeyring-posix_acl_access!!'}}, {{0x6, 0x0, 0x9, 0x1, 0x8, 0x40, {0x6, 0x10000, 0x81, 0x7f, 0x7, 0x14ed, 0x0, 0x0, 0x9, 0x4e, 0x6, r30, r33, 0x40, 0x7fff}}, {0x5, 0x7, 0x10, 0x5, 'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00'}}, {{0x4, 0x1, 0x7, 0x80000001, 0x3ff, 0x1, {0x4, 0x1, 0x9, 0x5, 0x8, 0x2, 0x10001, 0x7, 0x4, 0x8, 0x1f, r37, r40, 0x7ff, 0x7fffffff}}, {0x0, 0x4, 0x10, 0x81, 'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00'}}, {{0x5, 0x1, 0xffff, 0x40, 0x361, 0x9, {0x1, 0x400, 0x1, 0x200, 0x1ff, 0x400, 0x3, 0x3, 0x4600716e, 0x5, 0x9, r42, r43, 0x7, 0x3}}, {0x4, 0x3f, 0x3, 0x4, 'em0'}}, {{0x6, 0x3, 0x3, 0x5, 0x7f, 0x32, {0x3, 0x4, 0x40, 0x5, 0x3, 0x8, 0x8b, 0x5c, 0x5, 0x80, 0x4, r44, r61, 0xca, 0x7}}, {0x1, 0x0, 0x10, 0x80, 'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00'}}]}, 0x6a8) r62 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r62, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r63, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r62, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r64 = dup3(r1, r62, 0x0) r65 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r65, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r64, 0x8912, 0x400200) [ 238.553290] [] dump_stack+0xc1/0x120 [ 238.559288] [] warn_alloc_failed.cold+0x78/0x99 [ 238.565633] [] ? zone_watermark_ok_safe+0x290/0x290 [ 238.572531] [] ? sel_write_load+0x9e/0xf90 [ 238.578449] [] __vmalloc_node_range+0x365/0x650 [ 238.584789] [] ? check_preemption_disabled+0x3c/0x200 [ 238.591701] [] ? check_preemption_disabled+0x3c/0x200 [ 238.598688] [] ? task_has_security+0x130/0x270 [ 238.604950] [] vmalloc+0x5c/0x70 [ 238.609990] [] ? sel_write_load+0x119/0xf90 [ 238.616146] [] sel_write_load+0x119/0xf90 [ 238.621967] [] ? sel_read_bool+0x240/0x240 [ 238.627899] [] ? trace_hardirqs_on+0x10/0x10 [ 238.633975] [] __vfs_write+0x116/0x3d0 [ 238.639532] [] ? sel_read_bool+0x240/0x240 [ 238.645456] [] ? __vfs_read+0x3c0/0x3c0 15:45:24 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) [ 238.651180] [] ? check_preemption_disabled+0x3c/0x200 [ 238.658031] [] ? check_preemption_disabled+0x3c/0x200 [ 238.665103] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 238.672330] [] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 238.679011] [] ? __sb_start_write+0x14f/0x310 [ 238.685174] [] vfs_write+0x182/0x4e0 [ 238.690559] [] SyS_write+0xdc/0x1c0 [ 238.695968] [] ? SyS_read+0x1c0/0x1c0 15:45:24 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) fcntl$dupfd(r1, 0x0, r2) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x10000) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1b0000001200030207fffd946fa28308070019006c000000020085", 0x1b}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept$inet(r5, 0x0, &(0x7f0000000100)) [ 238.701432] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 238.707932] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 238.718212] Mem-Info: [ 238.720899] active_anon:692431 inactive_anon:9007 isolated_anon:0 [ 238.720899] active_file:4960 inactive_file:19373 isolated_file:0 [ 238.720899] unevictable:0 dirty:212 writeback:0 unstable:0 [ 238.720899] slab_reclaimable:5747 slab_unreclaimable:65946 [ 238.720899] mapped:61465 shmem:10185 pagetables:9669 bounce:0 [ 238.720899] free:768567 free_pcp:231 free_cma:0 [ 238.772854] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 15:45:24 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x9) [ 238.784698] DMA32 free:1388280kB min:4696kB low:5868kB high:7044kB active_anon:1278392kB inactive_anon:15032kB active_file:9872kB inactive_file:35548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:3145324kB managed:3021976kB mlocked:0kB dirty:588kB writeback:0kB mapped:114332kB shmem:20096kB slab_reclaimable:10668kB slab_unreclaimable:121572kB kernel_stack:6048kB pagetables:17656kB unstable:0kB bounce:0kB free_pcp:816kB local_pcp:148kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 238.814473] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 15:45:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) pipe2(&(0x7f0000000100), 0x800) ftruncate(r1, 0x1c08) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) write$FUSE_LK(r4, &(0x7f0000000040)={0x28}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0xffffffffffffff1b}, 0xb0b8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = eventfd(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fcntl$dupfd(r5, 0x0, r9) [ 238.866093] lowmem_reserve[]: 0 3504 3504 [ 238.882335] Normal free:1688324kB min:5580kB low:6972kB high:8368kB active_anon:1494432kB inactive_anon:15096kB active_file:9968kB inactive_file:41944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:4718592kB managed:3588764kB mlocked:0kB dirty:260kB writeback:0kB mapped:131528kB shmem:17388kB slab_reclaimable:12320kB slab_unreclaimable:141984kB kernel_stack:8704kB pagetables:21020kB unstable:0kB bounce:0kB free_pcp:936kB local_pcp:264kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all_unreclaimable? no [ 238.925215] audit_printk_skb: 60 callbacks suppressed [ 238.925228] audit: type=1400 audit(1575128725.041:477): avc: denied { create } for pid=10950 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:25 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) [ 239.035336] lowmem_reserve[]: 0 0 0 [ 239.040840] DMA32: 1*4kB (U) 3*8kB (UME) 2*16kB (UE) 4*32kB (UE) 44*64kB (UME) 22*128kB (UM) 12*256kB (UM) 10*512kB (UM) 5*1024kB (ME) 3*2048kB (UM) 333*4096kB (M) = 1389244kB [ 239.071862] Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UME) 52*32kB (UME) 34*64kB (UME) 21*128kB (UME) 23*256kB (UME) 9*512kB (UME) 7*1024kB (M) 1*2048kB (E) 405*4096kB (M) = 1685208kB [ 239.099647] 31853 total pagecache pages [ 239.104422] 0 pages in swap cache [ 239.109087] Swap cache stats: add 0, delete 0, find 0/0 [ 239.116579] Free swap = 0kB [ 239.119910] Total swap = 0kB 15:45:25 executing program 1: getcwd(&(0x7f0000000000)=""/1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "4cd8608731a83dcb39298c53c75fb7b2db50411ac29d7a5968b61cc661f9908122c50e4b3d4e82d9fa6e68bd6b6675aff08e3eb2b155f5e10b4c52bd54fd4e65c5b3b025afa9678791c10807877313647343b25e3f80a4f0c8a0232026bf56ec70bf8a0d7a18b25ceb2cd1364218f654002a3b6fa0c6c95c39d78bb7148b50541d3c8d5fa4cd4be9ac2f13b2f70fac2e28d30766a3d1dbdfb7f400c030bd70ab6e576e5deb79ff3356080fffc122109dc08590a890f34a8c"}, 0xc8) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xb2, 0x8) getsockname(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000180)=0x80) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000300)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x89, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x62, 0x0) 15:45:25 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000340)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = socket(0x10, 0x3, 0x2) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) r5 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) dup3(r7, r6, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x90(tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x323) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(r11, r10, 0x0) r12 = dup3(r11, 0xffffffffffffffff, 0x1c0000) preadv(r12, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) readv(r3, &(0x7f0000000580), 0x25b) r13 = socket$inet(0x2, 0x0, 0x0) syncfs(r13) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000500)={{0x2, 0x4e22, @multicast1}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) setsockopt$inet_tcp_int(r15, 0x6, 0x0, &(0x7f00000000c0)=0x25, 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x6}, 0x100010114, r23, r21, 0x4, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) r24 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) readv(r24, &(0x7f0000001b80), 0x0) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) [ 239.121319] audit: type=1400 audit(1575128725.131:478): avc: denied { create } for pid=10947 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 239.148086] 1965979 pages RAM [ 239.152211] 0 pages HighMem/MovableOnly [ 239.158591] 313294 pages reserved [ 239.199809] audit: type=1400 audit(1575128725.321:479): avc: denied { create } for pid=10947 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 239.229330] audit: type=1400 audit(1575128725.351:480): avc: denied { create } for pid=10975 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 239.230554] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. 15:45:25 executing program 2: syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000340)='/dev/keychord\x00', 0x10001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000380)) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000180)={0x8, &(0x7f0000000040)=[{0x5, 0x7, 0xff, 0xb4ba}, {0x4, 0x4, 0x0, 0x7}, {0x0, 0x0, 0xae, 0xaa7}, {0x9, 0x81, 0xa4, 0x8}, {0x2, 0x7f, 0x3f, 0x5}, {0x7, 0x0, 0x6, 0x4}, {0x200, 0x4, 0x1, 0x20}, {0x6, 0x0, 0x97, 0xa}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r7, 0x9c8ca000) ioctl$UI_DEV_CREATE(r2, 0x5501) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x8}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r4, 0xaa0, &(0x7f0000000240)="821163698fb01018559f5fb8d19d5d1e4b061a4a9f4c11dd443d46365f272ed617c6f449e586d636b153f588843e867fa151dbce48a5e5c4347e0816bb6f353ccd2d8bb317d6845116aff43a55a67948b650c7f4eea085d3611e1f850da4205dc9dd921807d244d925ae3a0c58b2527f9bc1528c8fa0fb39112914f7e2968c255f6336c4ee5337782c8c26878067268c696114d0") ptrace$cont(0x20, r4, 0x0, 0x0) 15:45:25 executing program 1: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket(0x11, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x0, 0x7, @loopback, 0x8}, {0xa, 0x0, 0x0, @mcast1, 0x3}, 0x0, [0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x2]}, 0x5c) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfb120eb7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) pipe2(&(0x7f0000000080), 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = socket(0x5, 0x0, 0xfe) r4 = geteuid() lsetxattr$security_capability(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x20, 0x3}, {0x80000001, 0x6}], r4}, 0x18, 0x7) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}], 0x300, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x1d2, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x40, @empty}, 0x10) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r6, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fdatasync(0xffffffffffffffff) ioctl$RTC_PIE_OFF(r1, 0x7006) 15:45:25 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) [ 239.525689] audit: type=1400 audit(1575128725.641:481): avc: denied { create } for pid=10997 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:25 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:25 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) [ 239.880269] audit: type=1400 audit(1575128726.001:482): avc: denied { create } for pid=11018 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x3) sendmmsg$inet6(r0, &(0x7f0000006700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@rthdr_2292={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 15:45:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000ffcffc)=0x1fc) syncfs(r0) 15:45:26 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) 15:45:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') exit(0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000004c0)) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x5460, &(0x7f0000000000)) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8101, 0x0) write$eventfd(r3, &(0x7f0000000140)=0x20000100000001, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2019024}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="104988e155d4f3832bbea5fed0e42b47e96e903bdb013e3ea4bde6e1b85110beabc1b8d8dc8d54912934ccb3e9c88ebd0be241bf6f8741f9e1a6f1504fe3e80fbe95320a1093a9e5d9bcb297a8204f0f53657f99fe5cbb558fb4c20fc0f5148fa8b879fe830c5935a308f3e0c0365c5fed3e6309443452fb9b577b96f31da37b957a61d88b70335ac5d6ce7584cdff19e907cd8116947c6af57d725baa8172cc98e694b31b69ad6420163c29c20a5566c463cece94aed34dd1256cad89e0ceb31e", @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={0x108, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37fa2a32}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffff7db, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x41110}, 0x4040000) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2a8, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x856}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae0d0234}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x178, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x7f}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1863147c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1ff, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8058}, 0x24000815) [ 240.337165] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 240.363502] audit: type=1400 audit(1575128726.481:483): avc: denied { create } for pid=11043 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 240.394248] audit: type=1400 audit(1575128726.511:484): avc: denied { create } for pid=11046 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x358}}, 0x8000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = eventfd(0x0) fcntl$dupfd(r6, 0x406, r7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000006c0)={{0x0, 0x0, @descriptor="f2c5efd9c56e91d3"}}) sendmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="de354f735dfb3ec58e99ca4c70933094f602b913e8dfdaeec5541a0cf918d82fad7f7b16ef445e3f562a8b993436cc094b62e2bf4117d3b422a076e25f95bc844f65d390f2d77787079a0fdea0dd21167ca935b9a7ba022ef61e656bc1d5b36a7980e78f35af6a5f99345e6a05aa70c67ceff21198a9f0f53efe79fbbbcf1f1b17b9d045aee7ea9265d142c6dcfcc7da6346cd0c5b5bbfe078ed765e155096a8d2086993b5b2f1e945d8d0bca5575b5745d3d696621aa7f7c3b31c7fa75b833640fff1c4cc0bfc3fe4f764eacc3d57e5", 0xd0}, {&(0x7f0000000700)="7651890ed38e0c79328e9ca2ce970eb463f1a770c5f3c6c4c219c2170ea150989c3af32ba5dfc99f72ff0ba48ba58e03109a420dca2a92f5227fc0305c7e10b33c9cfb3b6009b4ba0e8ab7731d253221cd32f08f00"/94, 0x5e}], 0x2, &(0x7f00000004c0)=[{0xf8, 0x112, 0x2, "c5026a887af6d23db690afc77fa3583957d4068a45b7df3cc9126e20cc81b22433beaf6c962d7fe743b7119189648ab4762653183f2c786942fa161f4815283b8288f6dd89ee396828ba05ac9906d39d2ad044b351e22f1e7fb4cc8b728b67bb542824a92d900d0392f65474de1465d9fbf8ad2f38bcb43f529838a19051b2696ced997e29110884d4d764f0d1f8ca442a1bcbf003e72ad094c160c6d95e4230e2b7070f221e4c41b91e0525641036a16983191996c1fdc59fe91e65fec3ab8b79884fc67330fa63d6036ccfc7c5d015196907299163a3f3e61183e77f20d84aef50ab"}, {0xc8, 0x29, 0x5, "5da2babdb29d235cc2032263b7c87c5c5ffb3872335552a8f21d27f75979541ddbeb913f29e5f0169d6c99a34a3509831a1429188c2379e841f5a5cb62dcbb9160b2471b3677c35575076dac98d11e8ba23db962f6a26907838ab7c06c86af547fe23287e46bb51ea1c2ed8bc930e80c2ec358ec8fa4d4a5285ab6251ac4aa2b4fac7e38fe5edd50e8933cf9b05bc036b4c8cf527cdf3d65e72714d987f7a3a63bc278e65bdfaa17d202fdc2d3515faba117e65be4ec10"}], 0x1c0}}], 0x1, 0x20000000) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x20, 0x0) 15:45:26 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:26 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000480)=0x1) [ 240.724676] audit: type=1400 audit(1575128726.841:485): avc: denied { create } for pid=11065 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:27 executing program 2: syz_open_dev$loop(&(0x7f00000004c0)='/de\r\xcd\x1a@\xb1\x02\x91\x11', 0x6e04, 0x182) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) inotify_init() fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2a4e41, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(0xffffffffffffffff, 0xe) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, &(0x7f0000000040), 0x8000fffffffe) writev(r2, &(0x7f0000000680), 0x0) socket$inet6(0xa, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) socket$inet6(0xa, 0x480040004000, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r9, r8) connect$unix(r8, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(r8, 0x4, 0x427ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r11, r10) fcntl$setstatus(r7, 0x4, 0x400) write(r10, &(0x7f0000000400)="d385da37c48985c8025f716720c975d335d669a55b5c6a5fa1148f7a463900c3fdc9e1a87e69cef2573eea1fd88efc8cb589e051525b152f9c65ac21e640a009eada93923d9f1f83bab17c", 0x4b) write$selinux_load(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa5cc554) 15:45:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="ff"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5460, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r7 = socket$netlink(0x10, 0x3, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) eventfd2(0x0, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}) r9 = syz_open_pts(r8, 0x0) read(r9, &(0x7f0000000080)=""/11, 0xb) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r11, 0x200004) sendfile(r7, r11, 0x0, 0x8000fffffffe) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) r14 = fcntl$dupfd(r12, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = eventfd(0x0) fcntl$dupfd(r15, 0x0, r16) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="056509dd810a24b733e10cb353f38bdb91b786cf895ff15eac01cfccb2202813d2ed99c029c862bfa8ea8d3b855dacfd862840fec5f83fc3c784335be6541b3e516a3223c4f2affecba550e7528e2cff12c1462d2cfeec6fbbb784fd4bcdd22225455493a0dfe25f53e96ec9f0dc"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5460, &(0x7f0000000000)) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = eventfd(0x0) r19 = fcntl$dupfd(r17, 0x0, r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = eventfd(0x0) fcntl$dupfd(r20, 0x0, r21) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xfffffffffffffc69, &(0x7f0000000700)={&(0x7f0000000d40)=ANY=[@ANYRES64=r5, @ANYRESHEX, @ANYRES32=r20, @ANYBLOB="8b17295373603e8ae17e92fea8f2fa61540e81c135151643c48fd670cfd135add91daf3dcb8e9ebd53dc50d66c3758d4bcbd861b989ae5e98a343df93d55a313b03cf383b8923d903d77ff1e98fe48c19e6075f8900498e2c886e481c6741ffe3b03b4b621a18b3b", @ANYBLOB="edf94f06e4252e167b3c85503295d1937a9f2faa3ccd4fb3d6f31c594c2857d21f7e6e2638b8856d9a5a5d77b794ce2b42209a62c31483c7b2859a4a6a055398783dc393ea316a77b7d8f622464eda8c8d0bffe8e6cba37d0c392b23efad5d7c3a66b9821d3a494fa3c56e400b195ed8e8d9c7825e8d8a2f0ab539637c0909432fe16386b0700026710cc6aa62e5713ef1229a1c6a58c7ae940954ff61f9dd5457b7f696a8b93e24e9e17d92ac66effff054bd85227d0464d3bdecb2efd831aee9507398ccc292cb99c2368179758525c6baf73762e9efdf305d", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES64=0x0], @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x8}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x4e24, 0x0, 0x4e21, 0x9b89, 0x2, 0x0, 0x20, 0x41, r6, r10}, {0xff, 0x20, 0x1, 0x0, 0x6, 0x0, 0x0, 0x5}, {0x0, 0x401, 0x3ff}, 0xae, 0x6e6bb1, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3503, 0x2, 0x0, 0x80, 0x0, 0x8000}}, 0xe8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000380)={0x9, 0x1f, 0x0, 0x0, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0xffffff2d, 0x22}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timerfd_gettime(r2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 15:45:27 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000300)={{0x87, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e20, 0x4, 'lblcr\x00', 0x0, 0x3, 0x73}, {@broadcast, 0x4e22, 0x0, 0x2, 0x2, 0x5}}, 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x24) fchdir(r2) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20008088) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x141400, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x20) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000400)=ANY=[@ANYBLOB="0000373ac3b86f0f97611cf0a11016115ef1b53c1599fcb97fbd3f7c3cdeb007c35edba65c45f64cfebfd608e9a50f35169d71270464f12cf209491b2133fd4ce9a77d19e49c3d4de762c505e2cfb3a6afaeca7f4337edc7ec96d197face907fc78d2b79e1e2c8cdb685010000000000000072737483ad3f89f97d7c80b6759118c6bbc607ffcc8637e97a0b6199b13f63f4c19bf630ec6bcd07aad6f100a401ac6b1faafdfa73a4564b89644170843c52d90e0e28f9dd0bf76cfad0a63171e8391fb2c9a3a289532c1542ca66693e4012cf9383f350e1ee396d9f"]) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x4000000000141042, 0x0) write$evdev(r6, &(0x7f00000000c0), 0xffffffed) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @remote}, 0x8, 0x0, 0x0, 0x0, 0xd722, 0x0, 0x9, 0x7f, 0x3}) fdatasync(r5) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 15:45:27 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) [ 241.131043] audit: type=1400 audit(1575128727.251:486): avc: denied { create } for pid=11043 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:27 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) 15:45:27 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) set_robust_list(&(0x7f0000000180)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x8893, 0x80000000, 0x6, 0x2, 0xfff}, 0x14) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)}], 0x1, 0x4) r3 = eventfd2(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x11) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) fcntl$dupfd(r12, 0x0, r13) ppoll(&(0x7f0000000240)=[{r6, 0x1004}, {r9, 0x40}, {r11, 0x40}, {r13, 0x2104}, {r3, 0xc0}], 0x5, &(0x7f0000000340)={r7, r8+10000000}, &(0x7f0000000380)={0x100000001}, 0x8) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(0x0, r15) ftruncate(r5, 0x280080) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x2c280, 0x0) ioctl$VT_GETMODE(r16, 0x5601, 0x0) sendfile(r3, r5, 0x0, 0x2008004fffffffe) 15:45:27 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0xffffffffffffff2a) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) read(r0, &(0x7f0000000600)=""/13, 0xccacf294) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000c00)="b6", 0xfffffffffffffce2, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) 15:45:27 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:27 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000008600), 0x1, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='*'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r1, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$int_in(r2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="00022cbd7000fcdbdf250200000008000500000000000800060000000000"], 0x24}, 0x1, 0x0, 0x0, 0x22000010}, 0x40003) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f00000002c0)="b5ae7bc91923b55933943ad024e5175e7c7b14827e456c8ec19021574fa6680c6f0716e94c1619f2a12a851c1a0bd0210fb076a73f528116ce45a1f260273bc3faccdde4314295b884ff97973a7517a27c36b45f2ea2e8b6fcde85b6b6f357acf1bbf713a18cbad30e2d2d57f39f0dadbd2b50f5b642bc321b92fad91a9a58134254ed7ae162b5f2b013", 0x8a}, {&(0x7f0000000380)="e0796d7e22ffa60918037dce602649efeaa859c42616f3a81b0411763afc0a463801bf52eebe93b48eae14425c746756c0704fc4b5681e41490af49451973697a70a10ae2f00c99d9a73b78d86c6d3a1629082202ee3dd9809026eb668589a77052b73dfa0011b95371991dc716278fd39e1a4822f4dfe0d22882a926e3011a2e6b9230c2e8ed95a09113b396f2ea7ed40f5d271534a4be19bc29103c1d99643241135", 0xa3}, {&(0x7f00000004c0)="19bd13acf07fe83b5d63640d8ae58e398510e02a2de8f6d0d3471f61af2bd0d32500145ed0d01ff88228c1cdbeab6b68ce39f935b66ecbbe5c2b75474b47adafbbb95ac3db46ecd71c7935bcbe5fb63960ffa88a2ca57cb523700d3ce4f5d67e0b23c41e58da557075fcbc36ebf22d3ace46d1ac5abc13deb2c0078554772ad13f53b45a48b7f04dfc34af074cbcef3c9fbef8643b298e22d985866915a33ac3e728eb626117705a25d97c8b5fe6739eefd2152ea7fc4b774cea73da6dcc9f549314fd15df40ed0befeb4b089f61284b08eafd03816b375ef642", 0xda}, {&(0x7f00000005c0)="61553afdae960b49877dffc64fa7be6546293843ed42492d9e8bce8fa1ab19ac29254dbe762ef74ac6a11d9fa6411bf9f53ec2ee92842be96c525a044e05739c9522479e0e56b00225232b645278aa175ea799ec49b56e91650aef1c683f204a39c0eee714a588f74790230d029381b6525d97fbd2d24d6406cb09f1274956cb6ed65d79b281bf5972476f154babd036b1d2bab04eb87ca35772edabea145fb222a68d69712e88a93842c994a518b3760f6e3d72cc0d886975e547409c425cc577", 0xc1}, {&(0x7f00000006c0)="e27b2a80ce24673c73de99ac6990b5a549dddd1275803cfd0553ea0982e619a807d693fd082395663693cc9e94e293fcae190e8c193df85127ed0a5a8e1fbb0096991246dddf9fb5b7b3bc2677c9737b47b98ba09a1eb4976d59b76c9546f2d6de60f9d7b4655f70f1312e39db0d03e6c7789cadb31f3c94a5d2b4fa99f65a5725ab16075acecb583e30aaf5cbe32154c1968142705535cd4b0b9cb646ec80f4f65af0a70094b1dd5d5e12919d840bcf82d6378cb92126673114c95ab82c77550f7fc3cd4d42296d5635d43c5aa85c6d5addaea74f421ab635ac5bfc0784f8bac5ac894dc250f5166cb8d30b1e8b75c662a6e4", 0xf3}, {&(0x7f00000007c0)="9ef509ed63fb24be2af7cd8fe9cf554c01c0765801bc7bb16de49c6ca7d0fc8348d84ab0c28e82e79cd96a6836b868e5f539ba3b3fdd36bcb45f79b4304f11e6d6566dbce743c96522e6b10961c57c67392d002f39c649cabf7af8fbd43bd400b9253b20c85f613bb09b66a91aa310f4438e14f8b89ee03436c4eb0d08f6222bb149e3cb9ffad82fa018e3dd58dd9bbe0e28e0ad721623e5fe4555292c813fb9c50ec59ff10b4a05e1cfebcce008c0701c84750a71e2df7e306e3740888f33cf235388760a3bb7eb4281fd7921fe2ed6c1cda84d0dbe987a1a0ad93a68301fa7467872c9d1695fa1476ac40adfd3cb7aa66d2edfc4b9a4", 0xf7}, {&(0x7f00000008c0)="70333def57b26d5d558d020dcb0c72896ceb9e2c869704a1888ba3b559bbbafdca1bf4ef9b5f3e2809cd246f92d82b1f655bc519176c9893831be773613d98ea92", 0x41}], 0x7, 0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) ioctl$FS_IOC_GETFLAGS(r0, 0x5460, &(0x7f0000000000)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @empty, 0x2, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote]}, 0x1c) timer_create(0x1, &(0x7f0000044000)={0x0, 0x14, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x26) r9 = syz_open_procfs$namespace(r8, &(0x7f0000000440)='ns/uts\x00') mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, r9, 0x4000) bind$inet(r7, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) 15:45:27 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:28 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:28 executing program 5: keyctl$session_to_parent(0x12) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x125d0e3fd6368ee7, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x1}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x8080) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000280)=0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x50000, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getownex(r5, 0x10, &(0x7f0000000300)) r6 = accept$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, &(0x7f0000000380)=0x10) vmsplice(r6, &(0x7f0000000800)=[{&(0x7f00000003c0)="aa4a65097678c3168ed533fc48aa2a68ceed0fda3056d3e14720ed223606eb2ab79db5edcbd8dab3a7913235faa31f966c1edc16a97e1cce29456d9bcb62478bb8d3327c70602c50bcebcb2e6ffea193252ff94dc09b84db4ba05af10bcf3c6ee317c0ff598b8a359a4a296649b453e54bc6d02aba564af2818c6c9f5ffff3082a36878e42588bd5e132ce55f368ea79f202a7c555613fbb9d", 0x99}, {&(0x7f0000000480)="50b8e57fbca03267904cbbc63904", 0xe}, {&(0x7f00000004c0)="93c8e250b6b80956155534e7970ac701d509ddeebc03a78a02fab307e68b61c8efc4983ad5cba19ba7901351f8b9a5982f26bed7a639b40613c57266c7d1e800f6afdaa906d3caee9d293de1ccea45443c8ffd7c7169d2351aaa2fc8c174e4d13b83ba210e01b7d1cbdca00a36bcff1da0ba4cec4133cfe007377eb3f6d29db7167e3972b8c32e6cb335a321ada11b03f5bb8569fb41ae30034017093290ca444ce77653e76e25adf51911b49d6b5eadbf299902a10f8d93b7fcf22eb26e873e", 0xc0}, {&(0x7f0000000580)="349fdc93880d53d755006fb8f544018680d95b641360579a43863cf762b5dd2813ca0afd076b060e7b378350705350e1b706ad176120a6d44ff327931109dc2c464c753e09dfd65cea1dd5004609e2cbbadce64f5f4a09e063b863555b2f4d529792b00fb1521a856d8a542a2708d722ec5462f09a212dcf2e780bcc8b1739ab017ab3a8ff48dbcf8808723393ca206f85c9ed7a8b9126f99f3877d7ad1d81332933abb174f67dd5a55dfb1f61b3b5160e", 0xb1}, {&(0x7f0000000640)="719505845c3fe15ad726475368ff3eb4342a19ae4360c92fd0d3ffbba20d8aa38917ff30f0d95463bf3a2c4e31ab0970edb3ef72a9c1d8f91d07e692c1b9f0e59d700ca7e7e89ab308d727f886117b3fe3669943121bd5a48e2a56154fe98da86c62c0fb688836695b15db6da45cf004e22f2e80e0b0210759aa4196fb46477b5d34bbc3f94666f34e12e67611b0536db2e5fcf174aae4", 0x97}, {&(0x7f0000000700)="78c044064ccec9941571a613831fb599ee2d918a06a0a6a93d8a6ccf57c2544e3778881f20f3683c28fcb73be048931181c925941ab852d9ddcaf6d6865b857196f54b34e243f5ba0f14d3d1f0", 0x4d}, {&(0x7f0000000780)="ad70263dd3448fe1c60e90aa0079adb6fb6ff02ddb35b46eaa84bb31bec40f254cefecd9ced03f02a9567d16e4798afee41ffaa2b345c8f99c80751449c9257faea9c175d77841b355e1fdda1e999f4e38a8c09a7e3e8a97e2b833", 0x5b}], 0x7, 0x0) socketpair(0x11, 0x80005, 0x9, &(0x7f0000000880)={0xffffffffffffffff}) sendto$inet(r7, &(0x7f00000008c0)="8cbb0c63c9ce1217f95ba105e2a80aa3395e169a4468e60a2107224738b3707b66544120947d6a6bf4717646706064a513b278abe918203ee725aed82aa3e231235fc1ffac602099d4db1d6b6a7115cc7963b6206e07edee1900fd448011a8c7ba7832774b42931c285e6f4ba3343b8b509be4f338cfd2ab7bd8f8ad2cbe1e6a9764629ddc42c072ec23cc16f932a9d2373ca826674d0c8d328e99c129c6f4ff5ca9fb089302a13c8c88cff3170f0f5be5cce64838444eca69", 0xb9, 0x4000, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/user\x00', 0x2, 0x0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/enforce\x00', 0x230000, 0x0) ioctl$BLKBSZSET(r8, 0x40081271, &(0x7f0000000a00)=0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='trusted.overlay.upper\x00', &(0x7f0000000ac0)={0x0, 0xfb, 0xd0, 0x7, 0x17, "28ad03148960bbc805d658b6a0115bd2", "fd6d63748b65ccef7156f7d4f794f0f98b6a996e3ad4e14d6d4f09647d1e2d58fa18adebda7132fb9460214ebef1ea467987bf4db5d64e95edc805369c19d4f2a77f278f3e23c5cbf7f1d0492f7e243133b02164b9c87291890e795d1a3244ea9a2eda63825a04e923405d61d4e922d7a251cee5dd22e1e38e8f3b80383ebd0db6c887d12bd6b8f154ac34dccc242ef91eb653abe07391b22294a5c9b0cbab53ef58eff74eb06ecd5f061c42d036c7af54e469e127b9f41a7cf140"}, 0xd0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x478, 0x0, 0x118, 0x0, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000bc0), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0xff000000, @mac=@remote, {[0x0, 0x0, 0x0, 0xff, 0x80, 0xa11a006e5560a1cf]}, @mac, {[0x0, 0xaf57efa4470beaf1, 0xc92e46950c920b80, 0x0, 0x0, 0xff]}, 0x7f, 0x100, 0x2, 0xe6d7, 0x3, 0x8, 'batadv0\x00', 'veth0_to_team\x00', {}, {0x76648f90042f78a3}, 0x0, 0x126}, 0xf0, 0x118}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@remote, @local, @local, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x9, @multicast1, 0xffffffff, 0x0, @mac, {[0x0, 0xff, 0x0, 0xff, 0x0, 0x101]}, @mac=@random="1ff3746c9905", {[0x101, 0x9d55df847642a1bd, 0x0, 0xff, 0xff, 0x1fe]}, 0x9, 0xce, 0xfffa, 0x7fff, 0x8, 0x7, 'vcan0\x00', 'tunl0\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xfffffffb, 0x9}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001100)={0x4, 0x70, 0xa9, 0x2, 0x40, 0xfb, 0x0, 0x3, 0x2c0, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x3}, 0x4000, 0x7, 0x3, 0x3, 0x3ff, 0x81, 0x9}) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000012c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001300)={@local, @mcast1, @rand_addr="d486339e2c392f40e8eeed623bed91a4", 0x0, 0x50, 0x5, 0x280, 0x401, 0xc02d0140}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001380), &(0x7f00000013c0)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) init_module(&(0x7f0000001400)='batadv0\x00', 0x8, &(0x7f0000001440)='vcan0\x00') r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000014c0)={{0x2, 0x4e22, @multicast1}, {0x0, @random="319c0df50111"}, 0x3a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) rmdir(&(0x7f0000001540)='./file0\x00') 15:45:28 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) set_robust_list(&(0x7f0000000180)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x8893, 0x80000000, 0x6, 0x2, 0xfff}, 0x14) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)}], 0x1, 0x4) r3 = eventfd2(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x5460, &(0x7f0000000000)) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x11) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = eventfd(0x0) r11 = fcntl$dupfd(r9, 0x0, r10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = eventfd(0x0) fcntl$dupfd(r12, 0x0, r13) ppoll(&(0x7f0000000240)=[{r6, 0x1004}, {r9, 0x40}, {r11, 0x40}, {r13, 0x2104}, {r3, 0xc0}], 0x5, &(0x7f0000000340)={r7, r8+10000000}, &(0x7f0000000380)={0x100000001}, 0x8) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(0x0, r15) ftruncate(r5, 0x280080) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x2c280, 0x0) ioctl$VT_GETMODE(r16, 0x5601, 0x0) sendfile(r3, r5, 0x0, 0x2008004fffffffe) 15:45:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000140)=0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200000ca, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r3, &(0x7f0000000180)='\x00', 0x1, 0x8000204087ffd, 0x0, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r4) recvfrom$inet(r3, 0x0, 0x98c2e669afef9535, 0x10120, 0x0, 0xffffffffffffff73) 15:45:28 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:28 executing program 5: creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x208002, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x7e4495a9f38dc128, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:mount_exec_t:s0\x00\x12k\xe9E\fHi\xc0S\xdb\x95`\xf5<\x11\xfbT\x98\x81\xdb:\x0eE\xbb', 0x3a, 0x0) 15:45:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r1 = socket$inet6(0xa, 0x6, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = eventfd(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @rand_addr="10f0efd9d8b4dc9be3bac8ea13249d36", 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x827}}}}]}]}, 0xac}}, 0x40000) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 15:45:28 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r2 = socket(0x100000000000011, 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x87ffd) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fadvise64(r1, 0x3, 0x41, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r4, 0x0, 0x800000000024) 15:45:28 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x3) 15:45:30 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:30 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:30 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r5, 0x2081fc) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141442, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r8, &(0x7f0000000140)={0x7}, 0x7) syncfs(r4) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20161042, 0x0) ftruncate(r9, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8}) 15:45:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x58, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x58, 0x60, "e59b133cc78cecc57debbc"}}]}, 0x148}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:45:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff13007b6b4816122d2550829eaa9435c999f7009bee59ca6726022b8753a088748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$negate(0xd, r3, 0x10001, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) [ 244.670097] audit_printk_skb: 45 callbacks suppressed [ 244.677968] audit: type=1400 audit(1575128730.801:503): avc: denied { create } for pid=11208 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 244.722313] audit: type=1400 audit(1575128730.791:502): avc: denied { create } for pid=11207 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff13007b6b4816122d2550829eaa9435c999f7009bee59ca6726022b8753a088748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$negate(0xd, r3, 0x10001, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) 15:45:30 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff13007b6b4816122d2550829eaa9435c999f7009bee59ca6726022b8753a088748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$negate(0xd, r3, 0x10001, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) 15:45:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff13007b6b4816122d2550829eaa9435c999f7009bee59ca6726022b8753a088748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$negate(0xd, r3, 0x10001, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) 15:45:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb2, 0x80000001, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) 15:45:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff13007b6b4816122d2550829eaa9435c999f7009bee59ca6726022b8753a088748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$negate(0xd, r3, 0x10001, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) 15:45:31 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r3 = dup2(r0, r2) open$dir(0x0, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 15:45:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000800)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff13007b6b4816122d2550829eaa9435c999f7009bee59ca6726022b8753a088748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$negate(0xd, r3, 0x10001, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x0) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) [ 244.950328] [ 244.951999] ====================================================== [ 244.958320] [ INFO: possible circular locking dependency detected ] [ 244.965267] 4.4.174+ #4 Not tainted [ 244.969022] ------------------------------------------------------- [ 244.975457] syz-executor.0/11277 is trying to acquire lock: [ 244.981255] (&pipe->mutex/1){+.+.+.}, at: [] fifo_open+0x15d/0xa00 [ 244.989932] [ 244.989932] but task is already holding lock: [ 244.995903] (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 [ 245.003969] audit: type=1400 audit(1575128731.071:504): avc: denied { create } for pid=11256 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 245.030654] [ 245.030654] which lock already depends on the new lock. [ 245.030654] [ 245.038994] [ 245.038994] the existing dependency chain (in reverse order) is: [ 245.046618] -> #1 (&sig->cred_guard_mutex){+.+.+.}: [ 245.052373] [] lock_acquire+0x15e/0x450 [ 245.058660] [] mutex_lock_interruptible_nested+0xd2/0xce0 [ 245.066640] [] proc_pid_attr_write+0x1a8/0x2a0 [ 245.073570] [] __vfs_write+0x116/0x3d0 [ 245.079768] [] __kernel_write+0x112/0x370 [ 245.086229] [] write_pipe_buf+0x15d/0x1f0 [ 245.093300] [] __splice_from_pipe+0x37e/0x7a0 [ 245.100104] [] splice_from_pipe+0x108/0x170 [ 245.106861] [] default_file_splice_write+0x3c/0x80 [ 245.114105] [] SyS_splice+0xd71/0x13a0 [ 245.120311] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 245.127663] -> #0 (&pipe->mutex/1){+.+.+.}: [ 245.132966] [] __lock_acquire+0x37d6/0x4f50 [ 245.139600] [] lock_acquire+0x15e/0x450 [ 245.145994] [] mutex_lock_nested+0xc1/0xb80 [ 245.152753] [] fifo_open+0x15d/0xa00 [ 245.158753] [] do_dentry_open+0x38f/0xbd0 [ 245.165355] [] vfs_open+0x10b/0x210 [ 245.171339] [] path_openat+0x136f/0x4470 [ 245.178054] [] do_filp_open+0x1a1/0x270 [ 245.184340] [] do_open_execat+0x10c/0x6e0 [ 245.190827] [] do_execveat_common.isra.0+0x6f6/0x1e90 [ 245.198430] [] SyS_execve+0x42/0x50 [ 245.204403] [] return_from_execve+0x0/0x23 [ 245.210927] [ 245.210927] other info that might help us debug this: [ 245.210927] [ 245.219163] Possible unsafe locking scenario: [ 245.219163] [ 245.225263] CPU0 CPU1 [ 245.229920] ---- ---- [ 245.234713] lock(&sig->cred_guard_mutex); [ 245.239337] lock(&pipe->mutex/1); [ 245.246072] lock(&sig->cred_guard_mutex); [ 245.253750] lock(&pipe->mutex/1); [ 245.259776] [ 245.259776] *** DEADLOCK *** [ 245.259776] [ 245.265835] 1 lock held by syz-executor.0/11277: [ 245.270704] #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 [ 245.281198] [ 245.281198] stack backtrace: [ 245.285843] CPU: 1 PID: 11277 Comm: syz-executor.0 Not tainted 4.4.174+ #4 [ 245.292857] 0000000000000000 de4535d50a02c3fd ffff8801d11e7530 ffffffff81aad1a1 [ 245.300989] ffffffff84057a80 ffff8800606ec740 ffffffff83abd2b0 ffffffff83ab6a10 [ 245.309119] ffffffff83abd2b0 ffff8801d11e7580 ffffffff813abcda ffff8801d11e7660 [ 245.317198] Call Trace: [ 245.319999] [] dump_stack+0xc1/0x120 [ 245.325362] [] print_circular_bug.cold+0x2f7/0x44e [ 245.331935] [] __lock_acquire+0x37d6/0x4f50 [ 245.338013] [] ? trace_hardirqs_on+0x10/0x10 [ 245.344535] [] ? do_filp_open+0x1a1/0x270 [ 245.350508] [] ? do_execveat_common.isra.0+0x6f6/0x1e90 [ 245.357625] [] ? SyS_execve+0x42/0x50 [ 245.363087] [] ? stub_execve+0x5/0x5 [ 245.368458] [] lock_acquire+0x15e/0x450 [ 245.374091] [] ? fifo_open+0x15d/0xa00 [ 245.379635] [] ? fifo_open+0x15d/0xa00 [ 245.385189] [] mutex_lock_nested+0xc1/0xb80 [ 245.391343] [] ? fifo_open+0x15d/0xa00 [ 245.397172] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 245.404157] [] ? mutex_trylock+0x500/0x500 [ 245.410145] [] ? fifo_open+0x24d/0xa00 [ 245.415690] [] ? fifo_open+0x28c/0xa00 [ 245.416575] audit: type=1326 audit(1575128731.071:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11304 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 [ 245.445941] [] fifo_open+0x15d/0xa00 15:45:31 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:31 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) read(0xffffffffffffffff, &(0x7f0000000200)=""/236, 0xffffffffffffff14) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/100) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/236, 0xffffffffffffff14) tee(0xffffffffffffffff, r0, 0x0, 0x0) r1 = getpid() fcntl$setown(0xffffffffffffffff, 0x8, r1) vmsplice(0xffffffffffffffff, 0x0, 0x23e, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000400)=@req3={0x100, 0x101, 0x0, 0x9, 0x88d9, 0x7, 0x8878}, 0x1c) socket(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x184) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) 15:45:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x58, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x58, 0x60, "e59b133cc78cecc57debbc"}}]}, 0x148}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:45:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0x0) 15:45:31 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) r0 = inotify_init() fstat(r0, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) [ 245.451474] [] do_dentry_open+0x38f/0xbd0 [ 245.457280] [] ? __inode_permission2+0x9e/0x250 [ 245.463777] [] ? pipe_release+0x250/0x250 [ 245.470449] [] vfs_open+0x10b/0x210 [ 245.475729] [] ? may_open.isra.0+0xe7/0x210 [ 245.481702] [] path_openat+0x136f/0x4470 [ 245.487413] [] ? depot_save_stack+0x1c3/0x5f0 [ 245.493545] [] ? may_open.isra.0+0x210/0x210 [ 245.499606] [] ? kmemdup+0x27/0x60 [ 245.504970] [] ? selinux_cred_prepare+0x43/0xa0 [ 245.511281] [] ? security_prepare_creds+0x83/0xc0 [ 245.518195] [] ? prepare_creds+0x228/0x2b0 [ 245.524082] [] ? prepare_exec_creds+0x12/0xf0 [ 245.530412] [] ? do_execveat_common.isra.0+0x2d6/0x1e90 [ 245.537567] [] ? stub_execve+0x5/0x5 [ 245.542930] [] ? kasan_kmalloc+0xb7/0xd0 [ 245.548690] [] ? kasan_slab_alloc+0xf/0x20 [ 245.554672] [] ? kmem_cache_alloc+0xdc/0x2c0 [ 245.560827] [] ? prepare_creds+0x28/0x2b0 [ 245.566744] [] ? prepare_exec_creds+0x12/0xf0 [ 245.573079] [] do_filp_open+0x1a1/0x270 [ 245.578692] [] ? save_stack_trace+0x26/0x50 [ 245.584651] [] ? user_path_mountpoint_at+0x50/0x50 [ 245.591236] [] ? SyS_execve+0x42/0x50 [ 245.596681] [] ? stub_execve+0x5/0x5 [ 245.602066] [] ? __lock_acquire+0xa4f/0x4f50 [ 245.608204] [] ? trace_hardirqs_on+0x10/0x10 [ 245.614283] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 245.621231] [] do_open_execat+0x10c/0x6e0 [ 245.627210] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 245.634232] [] ? setup_arg_pages+0x7b0/0x7b0 [ 245.640400] [] ? do_execveat_common.isra.0+0x6b8/0x1e90 [ 245.647690] [] do_execveat_common.isra.0+0x6f6/0x1e90 [ 245.654542] [] ? do_execveat_common.isra.0+0x422/0x1e90 [ 245.664503] [] ? __check_object_size+0x222/0x332 [ 245.671205] [] ? strncpy_from_user+0xd0/0x230 [ 245.677430] [] ? prepare_bprm_creds+0x120/0x120 [ 245.683746] [] ? getname_flags+0x232/0x550 [ 245.689987] [] ? SyS_clock_gettime+0x118/0x1e0 [ 245.696737] [] SyS_execve+0x42/0x50 15:45:31 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d09004bd4e40d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e0000000000ffff", 0x48}], 0x1) 15:45:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0x0) 15:45:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0x0) [ 245.702221] [] stub_execve+0x5/0x5 [ 245.707399] [] ? tracesys+0x88/0x8d 15:45:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) setuid(0x0) [ 245.785441] audit: type=1400 audit(1575128731.891:506): avc: denied { create } for pid=11327 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 [ 245.831886] audit: type=1400 audit(1575128731.951:507): avc: denied { create } for pid=11316 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 245.888438] audit: type=1400 audit(1575128732.011:508): avc: denied { create } for pid=11327 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=0 15:45:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) listen(r0, 0x5) 15:45:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:32 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:32 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:32 executing program 2: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) socketpair(0x1, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/236, 0xffffffffffffff14) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/236, 0xffffffffffffff14) socket$inet6_tcp(0xa, 0x1, 0x0) 15:45:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000000140)) 15:45:32 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) r0 = inotify_init() fstat(r0, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) 15:45:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:32 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:32 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) [ 246.217848] audit: type=1326 audit(1575128732.341:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11304 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 15:45:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x40000, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000001f8ffff"]) 15:45:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x58, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:32 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) [ 246.301713] audit: type=1400 audit(1575128732.421:510): avc: denied { create } for pid=11353 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 246.324905] audit: type=1326 audit(1575128732.421:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11376 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 15:45:32 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:33 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) r0 = inotify_init() fstat(r0, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) 15:45:33 executing program 3: wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:33 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:33 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=0x1) 15:45:33 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:33 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:33 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:45:33 executing program 3: wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:45:34 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) r0 = inotify_init() fstat(r0, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) 15:45:34 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:45:34 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=0x1) 15:45:34 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)=0x1) 15:45:34 executing program 3: wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:45:34 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:45:34 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:45:34 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:34 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) r0 = inotify_init() fstat(r0, &(0x7f00000003c0)) 15:45:34 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:45:34 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:34 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=0x1) 15:45:34 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) 15:45:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:45:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:45:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:45:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) inotify_init() 15:45:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:45:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:35 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, 0x0) 15:45:35 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) 15:45:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:45:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15:45:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 249.715225] audit_printk_skb: 36 callbacks suppressed [ 249.735504] audit: type=1400 audit(1575128735.831:524): avc: denied { create } for pid=11547 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 249.792456] audit: type=1400 audit(1575128735.911:525): avc: denied { create } for pid=11561 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:36 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) setgid(0x0) 15:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:45:36 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:36 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, 0x0) 15:45:36 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) 15:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) [ 250.450969] audit: type=1326 audit(1575128736.571:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11592 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 15:45:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) [ 250.541985] audit: type=1400 audit(1575128736.661:527): avc: denied { create } for pid=11590 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 250.634127] audit: type=1400 audit(1575128736.751:528): avc: denied { create } for pid=11604 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:37 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) 15:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 15:45:37 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:37 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, 0x0) 15:45:37 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 15:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 15:45:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) [ 251.263670] audit: type=1326 audit(1575128737.381:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11638 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 15:45:37 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 15:45:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 251.350474] audit: type=1400 audit(1575128737.471:530): avc: denied { create } for pid=11631 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 [ 251.546712] audit: type=1400 audit(1575128737.661:531): avc: denied { create } for pid=11670 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:38 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) 15:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 15:45:38 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:38 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)) 15:45:38 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) fcntl$dupfd(r5, 0x0, r6) 15:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:38 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:38 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) [ 252.081130] audit: type=1326 audit(1575128738.201:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11681 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d4ba code=0x0 15:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) [ 252.187831] audit: type=1400 audit(1575128738.301:533): avc: denied { create } for pid=11680 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) 15:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 15:45:39 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:39 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)) 15:45:39 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x0) 15:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) 15:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 15:45:39 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 15:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 15:45:39 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:39 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 15:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 15:45:39 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) 15:45:39 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)) 15:45:39 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) 15:45:39 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:39 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=0x1) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) 15:45:39 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)) 15:45:39 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, 0x0}) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) 15:45:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) 15:45:40 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:45:40 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)=0x1) 15:45:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) 15:45:40 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 15:45:40 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:40 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000740)=""/194, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0xfffffffffffffdeb) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3f46, 0x1, 0x7fff}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x100000010) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@local}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f00000001c0)=0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x5}}, 0x50) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigpending(&(0x7f0000000500), 0x8) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='memory.events\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000480)) 15:45:40 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) 15:45:40 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:40 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) 15:45:40 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) 15:45:40 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x6000000a, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000000), 0x43578cf5) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x9) [ 254.821286] audit_printk_skb: 36 callbacks suppressed [ 254.827071] audit: type=1400 audit(1575128740.941:546): avc: denied { create } for pid=11861 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0