[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 10.556059] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.078352] random: sshd: uninitialized urandom read (32 bytes read) [ 23.586482] audit: type=1400 audit(1546257174.446:6): avc: denied { map } for pid=1766 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 23.659142] random: sshd: uninitialized urandom read (32 bytes read) [ 24.225486] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. [ 29.914723] random: sshd: uninitialized urandom read (32 bytes read) 2018/12/31 11:53:00 fuzzer started [ 30.008746] audit: type=1400 audit(1546257180.866:7): avc: denied { map } for pid=1775 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 31.476541] random: cc1: uninitialized urandom read (8 bytes read) 2018/12/31 11:53:03 dialing manager at 10.128.0.26:45545 2018/12/31 11:53:08 syscalls: 1 2018/12/31 11:53:08 code coverage: enabled 2018/12/31 11:53:08 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2018/12/31 11:53:08 setuid sandbox: enabled 2018/12/31 11:53:08 namespace sandbox: enabled 2018/12/31 11:53:08 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/31 11:53:08 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/12/31 11:53:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/31 11:53:08 net packet injection: enabled 2018/12/31 11:53:08 net device setup: enabled [ 38.686759] random: crng init done 11:53:45 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001940)=""/198) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xb94f, 0x1, &(0x7f0000001580)=[{&(0x7f00000001c0)="bbfea5126046cf9e15434c", 0xb}], 0x10000, 0x0) 11:53:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./file0\x00') r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x24, 0x4, @thr={&(0x7f0000000b00)="e057a5fa9fef205c5fd792ec8d9ae7a3830b1d6c89e82c1f53dbec63fd6b12520e1704a59dd8ffe36cfe7f1d4840044ff446bbe7f60782c1207cf9eb52976051e9cbd47a70895ccf4c0f7b13ca246552712d82531e4740d66ae4c666d8203ef4da1ae887fcc2e2e268afdeab9bd2ab134e001e2ba5f339462367879681aa5a17505c616b83dedf0b44cebd1b920320c5fb1d7102140a49415df1c875d523f0189c85e4106b756175939b909a3b75fbcf5789e2e611cb8e089480c79321b7adbf6a579440d73a9de4e809afeeefac469811b030168d6b83095ec3564bf91e5e6091f2eac111940276c8485b22de96146f1823f36c1e2064a739042fd3d0e9998130dda082768414decf112f17dd6083c89d198e83c35fad6ed6f3ccafa7babbd13944016bac5a9c26a0eaefb3064173817d35b58d1bd27647ffb0be378536cdb4fbc7d7796f96588a5cc9eeed95e80d5f06423e93339f05851e33d72bcb1c7adbf9d125774de4054aad57b832a4f0dcfad6b8ef603682730c4168bff09f5ef102e3a37490e1f6c07b6bd7abec5b42bd2fe21e76e64331ffe462638c78701337c461071bd151d4b8badcecf124b6498d84f418cfa04ae603ed6c78acfa0335e50efbb0dfa1919284da92ab65f5448acaa6fcb40c1eb7d18fed6298e53d13e7cfb830d43b09b7708bb9d1c855b9dacded8abf0e41af4bc4aea87295ecef9458ea3afe68cf3ba1c7b069325a476e426e21478786d4f51342bfd8a40111a67e6c34cee76063721c1c07329bc832136be68e27cee8ab178a882b92e0d85626b04de5c2ac59f740bfb27fc02fdb17555c95aa4333d0152ff14e19f6c34bb717014c2beeb6ab3cde8254fc655cb01f65c6b2c0fde7173eae60790358269abab59eb742eb12da5e8c383566df0ac1850731a3ade6499f8a6b9863b7e1f864c3fe84bb93a7fbb698e6709f004bf3de76579dd666a8f1e45a391992ab239ea252c944f43e689edd9fcc632cc86b9d4a2348cdae49330e1adb8595cbd8a7421a41e7a09ea11b025e1f90fd96ddd4bc20b3784133adcad6a2d7501401b2e8ab9a3e2adccbe68910a31ead24ad3a4244032f28648f2742c4e04fe00730cf45eafaee6925ef2e8c9f1cc7ac2fb026a8e153ef0153c505457f1776f1dea02565f6f1132c32ca471f1ab8aabdac8dfef3da3cfb34bdc4bcfee6a0c515612459b8c45faee73ef517da20d3528cb4062de908f26395788515c807442f003e30c2d3582860c7208184f942e882eb09fc9fa443164dc0f71238c021c8687a5faf7d6690c9f80b3efe58a9ae2118fa02f0ee13aae65258e6921a99e93a49cc8676241e7fcb09417417b25f7a175ba81e1edd597a57d5f7ba21ef15208e3ed54fd73809d45c3bc3a6beb12dd683aabc7b5646437fed079c2a5dcd833a784563c2fc7a3f374899248b78f70ed2f1732925cdbb8ed49cbef4746a4fdaa1e0446993289ba6baf0fd335d4a9d23f2a382e0728b0b62f050f032f3f0952a40ac3a7e7dbf9e8940c79102e9227d361abb212e61695af72e4baaeef91f54062d5c67f6825a357188c72c8f8ca8ffbb67b5db67dd118d8b130ccdf0555f3d9e61f4c865ce73ded1ea1a99e201ac54fd296bb74c1c45635e9b8b3cccadaea952e1eeff0d73348f807d993cfd0eddd5e5191808282cde6fad41a71e55a1e8418b7ac3500a491be6b15f62fe54a51180d1452618cc2082db81cf9e30cff434159976b8c6bb21217603f3350c73aefc0c02f07f1b770bb5b743ca59646c6754a5facd61ef432032373fa742eb8c57be04c839d35fb502c2486e1dae9f36fbf120e9f22d2b8cbcd0f05a31276603e9b3d2eeb841ada7955b9438f1de38cae2a77dac3ece2817ab4b334d7c313890d0940c9889603c38155b935aa9f43fd23696ed53d9f10b362f135206916d7687b9e0a965aa4c098ca3bc9d7a74b7ef901fb4eac39bb695e297ac5678850175f3e084ecdcbb28a0f816f51cc025da1ceda707f2d3159f5c96ed42ab594faeb86f96f5cec40b8cabac9a712769bd78cdfac2cadbbb85df2e694c8597340cf08f5d4bb8c3615ecc4f05107605efa4c2f777d9bbda8815752656fce35534aa2f665051792d5881f9a3cfb8c1c6b91941f60386e7bd2dca59f97a26881b470cc364a36bbffe531ce55bf1330f46e126fa9bd21e7258ee02839fe52b27e1c73927f0134ead519b014ed54aaa992a6bb1061e2125d8c8f37cf617fc7fce6568942da2df8993d45430e98aa36df28eb33b83cd62ed9e184611cec4fe34909acba24319cb4a2ea5c0454d1b3003eba226a35062ebf109ba4b45eeb59db43e63586a72eb4ddbbcd8dd671e97086ea20e47c8753468e475af2d88f6a71eb7b57e5d87b7dc0510243e0d8f36cdbd00473adaa5fa9db28eebfbfc2173822d07d0e3b031e9075aa2c186437061470b7bda11ab40d9e0e5bd8857245627321e79ee48ef0a3da5f9232db803f4cdc1439b6041f1c0e7fb13fffbcc0f468106160347424353563f04e05bcdd646d381255996355def2b19058bac4a78176df0a40c1ac0a543244e41e49f449d141a4fbf6807a8b16669f7e5486446c853c70af66b219c1da0be7acd1d31dbb972976d22b1361130c1f99909332f8ea2b61f2cabd6a53236f5270f2521f26652197083c6c17dfeb879427915bd6b1897ed71d9d701f346d34d09544b9ec3f7738cf3964bf848765436a33dcdf5586916ab8f364353a1f08b78000604fdf00e388dc52ebc794a0f2852c789139cfe7817ff9a6dfdd1524dcc471c8157923750a5482aff25eaa44a5768207a260f8d8521fa0644deb7d25296adb5cdc069a965124cf61f491395af6ec9262a4c001601cda35063af8546ba91a078569208cebfd79bf12da0882bb1ffbb205101cfbc1652b6743dcdabf0ca424d7e8964be4f0ea9446772001b120965683b9b27fcbe275a133b714ca2bd3b53e0ccba485e75bcc8c1f796c2b731dbb65e96c100b5db5fa6126b1294abcd7d1ef4269c05c83182aa8712105fba1d86583191f92e9879e069d5b856afeea34538df6956c8c20e0719e6c2bb84702b5ef8d96c2a792467b67469a3ef15195eb00b81d882c761c9ad99ff3633a436e2542b0f4563f3a215361f0652c4634d1315b26b6b93d44141bebd641acb70e87378f01ca90773604c839694fec7b4644dfcb5ca536e55e3e76aec40910eb281c6191a0ce11eb13618d6ee08f414d6fe92f23625a62c3b713f239004710e64f6c0205f8b3d2ae47d04cae04a1e1f34716cdbe2e9c27bf3c355ff87b4fd7fb9a7bc9b0b1c2e6446ed157364d07785ebee640214a20e34bf55b4c21c27d57e0cace3aefb3adce0ba432a850349c70e9a0af9742e0d9e9ba25c82b1a67a93916b2ae12b6d4a0d2b28b213a99a1778b71d797bc2ca7d7fd2ddcddc16f5842477beb69654aba2d74e9e2d09d65be0f0b826a60d49ffb6543a48ab0021280cd7c6a14b2b8e72041be2b6f6ef6c63b82be10a4968194a521e6b84e50967508f891885e04ccc8ff5e580504059d9ab2f3ef1cd642e47c6fa71f5a63758bf0f892b49c0fcdba13358072063ae4dfd167c76d562547152911b12e51ba2445064b337b18e200eba44feafb9c939ea57222b716ee0b6448c687c0d94bc1ccdaa120b4a4409d9bbc3430264e98a814977fa8df8dc378bfa5348c1e9efcdf05227c05befc099819ed2cb3bcd5a35d65681666c8b84045367744f74906ee988030220f4776897c5bbf9304f5e9f6b5e72d5681ab7613c5cf52378ecd371e977c1bcee018a78d22f83e02b0519a6ce9cf5372a30f5701a7bf2ea35785d1fad14ead1985277b3705882c4a8967855ef230aa633941e6c716fc94a8298a120aae8799af376c98a9c27d0c14adb4b4d04fdc6723d08e63906282684acf84bad435e4772bf6deac362f8c326203325ea1a0eedcc29b37840631fade7220cdbce812d5be6fd4caf1a0b45a99d61d77f068831d86357b6779afea236c026b09183fb0af7a8bb3df7e157542f35a9128380f509a0633e11d3fea856d5718e9671b9cc71ec35b78c9cab5efea5145f2ae09b25e6c74030b470c5bf2c74d4f8726708cc74f9e685d77bef7ac474c6008c9e75ebee52e44c3f14abda03a19de2f2ca5263c05ef989669a7109f8f8013fa6501a5fffeb268c66867567363197833939d9fc835f115effae011dfd2aee2411581763d899ed1b606111bd6acdb0d146311ab171d5b020c7258997529a369490c4c9d3be9213b26c2de60417ea9a3ecaae291be014bbf66180a4ef9d7dd1268347eadb4c35a253af2611697042c2dd756d6e951a2f16d801791a8c8fae20ec3eee91c57199bf9f282dba64735ff3ef804303ec919929f3e0cffd7b4b6ec5b60b31e1c354e4a2d7fa2ec445859bf62f1a0829b74dc9afed6a5a94fb84f809c995b7d468196f02b22e61feffd0503730720ffb3d6a372cf46765fee6cde6b9d3a72c3142b6cb1c12f7455ba6bf51dd420d215b92b99865ef96831e8595c7e4a047dc55d3ac3859878142d2fd034b41c229951e0ab126ab817c2620f70509fdd251946eaf5204c57eea83b35584727962b58042a067dabae292c9f8d77863fd002fe69c7923473ecbd82861e68c7512236702ae41947a80143ce4001587f815a058717dc511173eebebd29b20e188b24a83a3f5fec51ecdf5ca63966aeb34ea5855ca5d92a0c062abf66dea8956da30b88d5e98793f0c8d3569b3cae13434aacf3acd4701b204d632d91ad626a1cf1abe01b974400bc7a310c1bd91bd09acbc2955052237a519f36366aabeb3a96b1b15a4643902c4006c4e62496c44a86db10faf79982d15ce8ee36c0264a01c8e0c69652a283c395f875909d89dafd6f4fbefc68e1665321dd776c3952b745a06557b1100a8c6c0e2f0e5232ca1d0a218ab6ba2c4bb05d2f2565ff141e64c6bda01703a5a61e3a8398a9cfadafd78ca4b7206012b6c30f34b26f9f63ea3fc781646f0cb82495dd81dd0a46549315ade8eb5b9738261ad2cba07e69bb24b37471e7c4fda316d002422763d9aedf0994acfacc4a29b06cd98b23a2e56dc2001379c06308a707ccf6851e12ad080043d238d6ec17c5631560c52bef9634fb7e1cbcf73747e64e828166dfb38b37e0974a373f69d06ec94c175ad1a5336d32701ffcb8a3197c39a3c67bcf2f4dc80374e61c9575903362aab9b83a0947c1caddfa49c5c3152b2652ac73fc26fb2697daf0ee244189b47ee7c20dc368188cd1e224bcc2316f7f046642ee20a41d15790af6d64d0eb33e669c235c2941e46212c7121da481d7b9e01253cfee7bec5ef28b33324ada99c6b9c18aec54b81e25681bdc9a78e80275cbe26c8583bbd7c14c339c45db78dcc2055f69631a452e7374635a51f51df4e928c12d3d73b840dbca9504044f1cde349e0bf05e9a161c14d43750bc4326244e53b6da85394ccf74eb39965349d351627eaa016a61cba52326691b336b0d6c32b97c6d18c67fbdd63653fdae170cbe5fb29f9405558e70a4e9eebfc55bd7a41fbeb59e043a2e5b6cd3d1236e924e0fcf4553afdca67e961c7098d289281e4b89cb069b729b9094846fee1144e6c97ff9ab4182f9d719b8988901f7f29a046d10f87f943c3ecf83e198b28cf07f5781b1a28ec7d214670ec900a391b887975506ce82dc3a211f668b266d5dfd3e9f79713cc17f4cbe153c029904541408d13d4c4a7d577351e545a7f0657b1c597550f3ec1f143a0cffe52a8891e401ad8c98e75e715d88616c7", 0x0}}, &(0x7f0000000500)) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r1) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000340)=""/180) clone(0x200, &(0x7f00000006c0)="a220f0a520deca1b38dacd36d993d008a00150b211757863f4e7240ca055acfa4602ea9f0d787b28164340e20e974c77c866a40d07de1bcb355c4f4c307dbd1fb445dc99d808283c5c623095a78405b95938380ef1ddeb55bb4360a396968c84a98c0e947ced362a872a347bbc6c0fc1b650e0122b50dbf439b06ac17c18575e43a8cbb4d560e404587a4708fc749472fe4a70fb914b9259694ab61d555b45097cd99c40d903dd3901592428a53d1c82095ed79fe1ccc901b8c8059c88260d726c7e476003b1b8bbf3b201057f5ae1252c", 0x0, 0x0, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x807fd) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x48}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000580)={0xfe68}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x989680}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000ac0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r6) io_setup(0x3, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) 11:53:45 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', &(0x7f00000000c0)=""/150, 0x96) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioprio_get$pid(0x1, 0x0) getuid() ptrace$setregs(0xd, 0x0, 0x94b, &(0x7f00000003c0)="35d4e473d5383012ca4ec903b127e3e4a9a2b99792ef3de13d92df52f1d79b84a33e95b2c44f1892884ce41f20") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f80), 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 11:53:45 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000300)) mount(&(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRESOCT, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r3], @ANYRES64=r3], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x200000, &(0x7f000000a000)) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x190) fstat(r4, &(0x7f00000005c0)) ftruncate(r4, 0x208200) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r3}, 0x10) r6 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') accept4$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14) accept$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001d40)=0x14) accept4$packet(r6, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x800) getsockname$packet(r1, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002040)=0x14) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002080)={{{@in=@initdev, @in=@loopback}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, 0x0) recvmmsg(r3, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002700)=""/204, 0xcc}, {&(0x7f0000002900)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000002d80)=""/229, 0xe5}}, {{&(0x7f0000002e80)=@tipc=@id, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f00)=""/160, 0xa0}, {&(0x7f0000002fc0)=""/82, 0x52}], 0x2, &(0x7f0000003080)=""/234, 0xea}, 0x400000000000}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003200)=""/28, 0x1c}, {&(0x7f0000003240)=""/26, 0x1a}, {&(0x7f0000003280)=""/171, 0xab}, {&(0x7f0000003340)=""/244, 0xf4}, {&(0x7f0000003440)=""/195, 0xc3}], 0x5, &(0x7f00000035c0)=""/185, 0xb9}}, {{&(0x7f0000003680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003700)=""/243, 0xf3}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f00000038c0)=""/49, 0x31}, {&(0x7f0000003900)=""/238, 0xee}, {&(0x7f0000003a00)=""/68, 0x44}, {&(0x7f0000003a80)=""/178, 0xb2}], 0x6, &(0x7f0000003bc0)=""/199, 0xc7}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x5, 0x2, 0x0) accept4$packet(r2, &(0x7f0000004780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000047c0)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000004800)={{{@in6=@remote, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000004b40)) getsockname$packet(r3, &(0x7f0000004b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004bc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004c00)={{{@in=@loopback, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004e00)={'hsr0\x00'}) accept$packet(r2, &(0x7f0000004f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004f40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000005140)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000005280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$packet(r0, &(0x7f0000005480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000054c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005540)={'veth0_to_bond\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000005c80)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11:53:45 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') 11:53:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) [ 74.612436] audit: type=1400 audit(1546257225.476:8): avc: denied { map } for pid=1775 comm="syz-fuzzer" path="/root/syzkaller-shm291685716" dev="sda1" ino=16497 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 74.711057] audit: type=1400 audit(1546257225.476:9): avc: denied { map } for pid=1818 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4999 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 77.521333] hrtimer: interrupt took 33295 ns [ 77.534785] audit: type=1400 audit(1546257228.386:10): avc: denied { create } for pid=2711 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 77.626567] audit: type=1400 audit(1546257228.486:11): avc: denied { write } for pid=2711 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 77.650880] audit: type=1400 audit(1546257228.506:12): avc: denied { read } for pid=2711 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 77.674857] audit: type=1400 audit(1546257228.506:13): avc: denied { sys_admin } for pid=2711 comm="syz-executor1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 77.733042] FAT-fs (loop0): bogus number of reserved sectors [ 77.739204] FAT-fs (loop0): Can't find a valid FAT filesystem 11:53:48 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 11:53:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./file0\x00') r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x24, 0x4, @thr={&(0x7f0000000b00)="e057a5fa9fef205c5fd792ec8d9ae7a3830b1d6c89e82c1f53dbec63fd6b12520e1704a59dd8ffe36cfe7f1d4840044ff446bbe7f60782c1207cf9eb52976051e9cbd47a70895ccf4c0f7b13ca246552712d82531e4740d66ae4c666d8203ef4da1ae887fcc2e2e268afdeab9bd2ab134e001e2ba5f339462367879681aa5a17505c616b83dedf0b44cebd1b920320c5fb1d7102140a49415df1c875d523f0189c85e4106b756175939b909a3b75fbcf5789e2e611cb8e089480c79321b7adbf6a579440d73a9de4e809afeeefac469811b030168d6b83095ec3564bf91e5e6091f2eac111940276c8485b22de96146f1823f36c1e2064a739042fd3d0e9998130dda082768414decf112f17dd6083c89d198e83c35fad6ed6f3ccafa7babbd13944016bac5a9c26a0eaefb3064173817d35b58d1bd27647ffb0be378536cdb4fbc7d7796f96588a5cc9eeed95e80d5f06423e93339f05851e33d72bcb1c7adbf9d125774de4054aad57b832a4f0dcfad6b8ef603682730c4168bff09f5ef102e3a37490e1f6c07b6bd7abec5b42bd2fe21e76e64331ffe462638c78701337c461071bd151d4b8badcecf124b6498d84f418cfa04ae603ed6c78acfa0335e50efbb0dfa1919284da92ab65f5448acaa6fcb40c1eb7d18fed6298e53d13e7cfb830d43b09b7708bb9d1c855b9dacded8abf0e41af4bc4aea87295ecef9458ea3afe68cf3ba1c7b069325a476e426e21478786d4f51342bfd8a40111a67e6c34cee76063721c1c07329bc832136be68e27cee8ab178a882b92e0d85626b04de5c2ac59f740bfb27fc02fdb17555c95aa4333d0152ff14e19f6c34bb717014c2beeb6ab3cde8254fc655cb01f65c6b2c0fde7173eae60790358269abab59eb742eb12da5e8c383566df0ac1850731a3ade6499f8a6b9863b7e1f864c3fe84bb93a7fbb698e6709f004bf3de76579dd666a8f1e45a391992ab239ea252c944f43e689edd9fcc632cc86b9d4a2348cdae49330e1adb8595cbd8a7421a41e7a09ea11b025e1f90fd96ddd4bc20b3784133adcad6a2d7501401b2e8ab9a3e2adccbe68910a31ead24ad3a4244032f28648f2742c4e04fe00730cf45eafaee6925ef2e8c9f1cc7ac2fb026a8e153ef0153c505457f1776f1dea02565f6f1132c32ca471f1ab8aabdac8dfef3da3cfb34bdc4bcfee6a0c515612459b8c45faee73ef517da20d3528cb4062de908f26395788515c807442f003e30c2d3582860c7208184f942e882eb09fc9fa443164dc0f71238c021c8687a5faf7d6690c9f80b3efe58a9ae2118fa02f0ee13aae65258e6921a99e93a49cc8676241e7fcb09417417b25f7a175ba81e1edd597a57d5f7ba21ef15208e3ed54fd73809d45c3bc3a6beb12dd683aabc7b5646437fed079c2a5dcd833a784563c2fc7a3f374899248b78f70ed2f1732925cdbb8ed49cbef4746a4fdaa1e0446993289ba6baf0fd335d4a9d23f2a382e0728b0b62f050f032f3f0952a40ac3a7e7dbf9e8940c79102e9227d361abb212e61695af72e4baaeef91f54062d5c67f6825a357188c72c8f8ca8ffbb67b5db67dd118d8b130ccdf0555f3d9e61f4c865ce73ded1ea1a99e201ac54fd296bb74c1c45635e9b8b3cccadaea952e1eeff0d73348f807d993cfd0eddd5e5191808282cde6fad41a71e55a1e8418b7ac3500a491be6b15f62fe54a51180d1452618cc2082db81cf9e30cff434159976b8c6bb21217603f3350c73aefc0c02f07f1b770bb5b743ca59646c6754a5facd61ef432032373fa742eb8c57be04c839d35fb502c2486e1dae9f36fbf120e9f22d2b8cbcd0f05a31276603e9b3d2eeb841ada7955b9438f1de38cae2a77dac3ece2817ab4b334d7c313890d0940c9889603c38155b935aa9f43fd23696ed53d9f10b362f135206916d7687b9e0a965aa4c098ca3bc9d7a74b7ef901fb4eac39bb695e297ac5678850175f3e084ecdcbb28a0f816f51cc025da1ceda707f2d3159f5c96ed42ab594faeb86f96f5cec40b8cabac9a712769bd78cdfac2cadbbb85df2e694c8597340cf08f5d4bb8c3615ecc4f05107605efa4c2f777d9bbda8815752656fce35534aa2f665051792d5881f9a3cfb8c1c6b91941f60386e7bd2dca59f97a26881b470cc364a36bbffe531ce55bf1330f46e126fa9bd21e7258ee02839fe52b27e1c73927f0134ead519b014ed54aaa992a6bb1061e2125d8c8f37cf617fc7fce6568942da2df8993d45430e98aa36df28eb33b83cd62ed9e184611cec4fe34909acba24319cb4a2ea5c0454d1b3003eba226a35062ebf109ba4b45eeb59db43e63586a72eb4ddbbcd8dd671e97086ea20e47c8753468e475af2d88f6a71eb7b57e5d87b7dc0510243e0d8f36cdbd00473adaa5fa9db28eebfbfc2173822d07d0e3b031e9075aa2c186437061470b7bda11ab40d9e0e5bd8857245627321e79ee48ef0a3da5f9232db803f4cdc1439b6041f1c0e7fb13fffbcc0f468106160347424353563f04e05bcdd646d381255996355def2b19058bac4a78176df0a40c1ac0a543244e41e49f449d141a4fbf6807a8b16669f7e5486446c853c70af66b219c1da0be7acd1d31dbb972976d22b1361130c1f99909332f8ea2b61f2cabd6a53236f5270f2521f26652197083c6c17dfeb879427915bd6b1897ed71d9d701f346d34d09544b9ec3f7738cf3964bf848765436a33dcdf5586916ab8f364353a1f08b78000604fdf00e388dc52ebc794a0f2852c789139cfe7817ff9a6dfdd1524dcc471c8157923750a5482aff25eaa44a5768207a260f8d8521fa0644deb7d25296adb5cdc069a965124cf61f491395af6ec9262a4c001601cda35063af8546ba91a078569208cebfd79bf12da0882bb1ffbb205101cfbc1652b6743dcdabf0ca424d7e8964be4f0ea9446772001b120965683b9b27fcbe275a133b714ca2bd3b53e0ccba485e75bcc8c1f796c2b731dbb65e96c100b5db5fa6126b1294abcd7d1ef4269c05c83182aa8712105fba1d86583191f92e9879e069d5b856afeea34538df6956c8c20e0719e6c2bb84702b5ef8d96c2a792467b67469a3ef15195eb00b81d882c761c9ad99ff3633a436e2542b0f4563f3a215361f0652c4634d1315b26b6b93d44141bebd641acb70e87378f01ca90773604c839694fec7b4644dfcb5ca536e55e3e76aec40910eb281c6191a0ce11eb13618d6ee08f414d6fe92f23625a62c3b713f239004710e64f6c0205f8b3d2ae47d04cae04a1e1f34716cdbe2e9c27bf3c355ff87b4fd7fb9a7bc9b0b1c2e6446ed157364d07785ebee640214a20e34bf55b4c21c27d57e0cace3aefb3adce0ba432a850349c70e9a0af9742e0d9e9ba25c82b1a67a93916b2ae12b6d4a0d2b28b213a99a1778b71d797bc2ca7d7fd2ddcddc16f5842477beb69654aba2d74e9e2d09d65be0f0b826a60d49ffb6543a48ab0021280cd7c6a14b2b8e72041be2b6f6ef6c63b82be10a4968194a521e6b84e50967508f891885e04ccc8ff5e580504059d9ab2f3ef1cd642e47c6fa71f5a63758bf0f892b49c0fcdba13358072063ae4dfd167c76d562547152911b12e51ba2445064b337b18e200eba44feafb9c939ea57222b716ee0b6448c687c0d94bc1ccdaa120b4a4409d9bbc3430264e98a814977fa8df8dc378bfa5348c1e9efcdf05227c05befc099819ed2cb3bcd5a35d65681666c8b84045367744f74906ee988030220f4776897c5bbf9304f5e9f6b5e72d5681ab7613c5cf52378ecd371e977c1bcee018a78d22f83e02b0519a6ce9cf5372a30f5701a7bf2ea35785d1fad14ead1985277b3705882c4a8967855ef230aa633941e6c716fc94a8298a120aae8799af376c98a9c27d0c14adb4b4d04fdc6723d08e63906282684acf84bad435e4772bf6deac362f8c326203325ea1a0eedcc29b37840631fade7220cdbce812d5be6fd4caf1a0b45a99d61d77f068831d86357b6779afea236c026b09183fb0af7a8bb3df7e157542f35a9128380f509a0633e11d3fea856d5718e9671b9cc71ec35b78c9cab5efea5145f2ae09b25e6c74030b470c5bf2c74d4f8726708cc74f9e685d77bef7ac474c6008c9e75ebee52e44c3f14abda03a19de2f2ca5263c05ef989669a7109f8f8013fa6501a5fffeb268c66867567363197833939d9fc835f115effae011dfd2aee2411581763d899ed1b606111bd6acdb0d146311ab171d5b020c7258997529a369490c4c9d3be9213b26c2de60417ea9a3ecaae291be014bbf66180a4ef9d7dd1268347eadb4c35a253af2611697042c2dd756d6e951a2f16d801791a8c8fae20ec3eee91c57199bf9f282dba64735ff3ef804303ec919929f3e0cffd7b4b6ec5b60b31e1c354e4a2d7fa2ec445859bf62f1a0829b74dc9afed6a5a94fb84f809c995b7d468196f02b22e61feffd0503730720ffb3d6a372cf46765fee6cde6b9d3a72c3142b6cb1c12f7455ba6bf51dd420d215b92b99865ef96831e8595c7e4a047dc55d3ac3859878142d2fd034b41c229951e0ab126ab817c2620f70509fdd251946eaf5204c57eea83b35584727962b58042a067dabae292c9f8d77863fd002fe69c7923473ecbd82861e68c7512236702ae41947a80143ce4001587f815a058717dc511173eebebd29b20e188b24a83a3f5fec51ecdf5ca63966aeb34ea5855ca5d92a0c062abf66dea8956da30b88d5e98793f0c8d3569b3cae13434aacf3acd4701b204d632d91ad626a1cf1abe01b974400bc7a310c1bd91bd09acbc2955052237a519f36366aabeb3a96b1b15a4643902c4006c4e62496c44a86db10faf79982d15ce8ee36c0264a01c8e0c69652a283c395f875909d89dafd6f4fbefc68e1665321dd776c3952b745a06557b1100a8c6c0e2f0e5232ca1d0a218ab6ba2c4bb05d2f2565ff141e64c6bda01703a5a61e3a8398a9cfadafd78ca4b7206012b6c30f34b26f9f63ea3fc781646f0cb82495dd81dd0a46549315ade8eb5b9738261ad2cba07e69bb24b37471e7c4fda316d002422763d9aedf0994acfacc4a29b06cd98b23a2e56dc2001379c06308a707ccf6851e12ad080043d238d6ec17c5631560c52bef9634fb7e1cbcf73747e64e828166dfb38b37e0974a373f69d06ec94c175ad1a5336d32701ffcb8a3197c39a3c67bcf2f4dc80374e61c9575903362aab9b83a0947c1caddfa49c5c3152b2652ac73fc26fb2697daf0ee244189b47ee7c20dc368188cd1e224bcc2316f7f046642ee20a41d15790af6d64d0eb33e669c235c2941e46212c7121da481d7b9e01253cfee7bec5ef28b33324ada99c6b9c18aec54b81e25681bdc9a78e80275cbe26c8583bbd7c14c339c45db78dcc2055f69631a452e7374635a51f51df4e928c12d3d73b840dbca9504044f1cde349e0bf05e9a161c14d43750bc4326244e53b6da85394ccf74eb39965349d351627eaa016a61cba52326691b336b0d6c32b97c6d18c67fbdd63653fdae170cbe5fb29f9405558e70a4e9eebfc55bd7a41fbeb59e043a2e5b6cd3d1236e924e0fcf4553afdca67e961c7098d289281e4b89cb069b729b9094846fee1144e6c97ff9ab4182f9d719b8988901f7f29a046d10f87f943c3ecf83e198b28cf07f5781b1a28ec7d214670ec900a391b887975506ce82dc3a211f668b266d5dfd3e9f79713cc17f4cbe153c029904541408d13d4c4a7d577351e545a7f0657b1c597550f3ec1f143a0cffe52a8891e401ad8c98e75e715d88616c7", 0x0}}, &(0x7f0000000500)) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r1) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000340)=""/180) clone(0x200, &(0x7f00000006c0)="a220f0a520deca1b38dacd36d993d008a00150b211757863f4e7240ca055acfa4602ea9f0d787b28164340e20e974c77c866a40d07de1bcb355c4f4c307dbd1fb445dc99d808283c5c623095a78405b95938380ef1ddeb55bb4360a396968c84a98c0e947ced362a872a347bbc6c0fc1b650e0122b50dbf439b06ac17c18575e43a8cbb4d560e404587a4708fc749472fe4a70fb914b9259694ab61d555b45097cd99c40d903dd3901592428a53d1c82095ed79fe1ccc901b8c8059c88260d726c7e476003b1b8bbf3b201057f5ae1252c", 0x0, 0x0, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x807fd) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x48}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000580)={0xfe68}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x989680}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000ac0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r6) io_setup(0x3, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) 11:53:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 11:53:49 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 11:53:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) [ 78.356320] audit: type=1400 audit(1546257229.216:14): avc: denied { create } for pid=2769 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:53:49 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') [ 78.484774] audit: type=1400 audit(1546257229.226:15): avc: denied { map } for pid=2769 comm="syz-executor3" path="/root/syzkaller-testdir649490854/syzkaller.xI2FlZ/0/file0/bus" dev="ramfs" ino=8737 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 11:53:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 11:53:49 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') 11:53:49 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 11:53:49 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001940)=""/198) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xb94f, 0x1, &(0x7f0000001580)=[{&(0x7f00000001c0)="bbfea5126046cf9e15434c", 0xb}], 0x10000, 0x0) [ 78.589036] audit: type=1400 audit(1546257229.356:16): avc: denied { getattr } for pid=2769 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:53:49 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001940)=""/198) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xb94f, 0x1, &(0x7f0000001580)=[{&(0x7f00000001c0)="bbfea5126046cf9e15434c", 0xb}], 0x10000, 0x0) 11:53:49 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 11:53:49 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') 11:53:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./file0\x00') r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x24, 0x4, @thr={&(0x7f0000000b00)="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", 0x0}}, &(0x7f0000000500)) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r1) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000340)=""/180) clone(0x200, &(0x7f00000006c0)="a220f0a520deca1b38dacd36d993d008a00150b211757863f4e7240ca055acfa4602ea9f0d787b28164340e20e974c77c866a40d07de1bcb355c4f4c307dbd1fb445dc99d808283c5c623095a78405b95938380ef1ddeb55bb4360a396968c84a98c0e947ced362a872a347bbc6c0fc1b650e0122b50dbf439b06ac17c18575e43a8cbb4d560e404587a4708fc749472fe4a70fb914b9259694ab61d555b45097cd99c40d903dd3901592428a53d1c82095ed79fe1ccc901b8c8059c88260d726c7e476003b1b8bbf3b201057f5ae1252c", 0x0, 0x0, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x807fd) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x48}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000580)={0xfe68}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x989680}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000ac0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r6) io_setup(0x3, &(0x7f0000000140)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) 11:53:50 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001940)=""/198) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xb94f, 0x1, &(0x7f0000001580)=[{&(0x7f00000001c0)="bbfea5126046cf9e15434c", 0xb}], 0x10000, 0x0) 11:53:50 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 11:53:50 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) [ 79.294408] FAT-fs (loop4): bogus number of reserved sectors [ 79.307241] FAT-fs (loop4): Can't find a valid FAT filesystem [ 79.364000] FAT-fs (loop0): bogus number of reserved sectors [ 79.391087] FAT-fs (loop0): Can't find a valid FAT filesystem 11:53:50 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x80001000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1e06d73802273095) fcntl$setflags(r4, 0x2, 0x1) pwritev(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) [ 79.480452] kasan: CONFIG_KASAN_INLINE enabled [ 79.485400] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 79.509947] general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 79.516718] Modules linked in: [ 79.519925] CPU: 0 PID: 2849 Comm: blkid Not tainted 4.14.91+ #1 [ 79.526061] task: ffff8881d4059780 task.stack: ffff8881d6d48000 [ 79.532131] RIP: 0010:bd_set_size+0x58/0x320 [ 79.536548] RSP: 0018:ffff8881d6d4fc60 EFLAGS: 00010202 [ 79.541904] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 79.549165] RDX: 00000000000000a7 RSI: 0000000000000000 RDI: 0000000000000538 [ 79.556424] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 79.563679] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d9eaed40 [ 79.570931] R13: ffff8881d9eaed40 R14: ffff8881d37aa0c8 R15: ffff8881d37aa2a8 [ 79.578191] FS: 00007f1d8c55b740(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 [ 79.586411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.592283] CR2: 0000000001a949b8 CR3: 00000001d387c003 CR4: 00000000001606b0 [ 79.599535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.606789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.614045] Call Trace: [ 79.616641] loop_clr_fd+0x464/0xac0 [ 79.620366] lo_release+0xff/0x190 [ 79.623884] ? lo_compat_ioctl+0x130/0x130 [ 79.628107] __blkdev_put+0x518/0x6d0 [ 79.631921] ? bd_set_size+0x320/0x320 [ 79.635809] ? blkdev_put+0x75/0x4c0 [ 79.639524] ? blkdev_put+0x4c0/0x4c0 [ 79.643304] blkdev_close+0x86/0xb0 [ 79.646918] __fput+0x25e/0x700 [ 79.650211] task_work_run+0x118/0x190 [ 79.654098] exit_to_usermode_loop+0x13b/0x160 [ 79.658681] do_syscall_64+0x372/0x4b0 [ 79.662550] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 11:53:50 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000001940)=""/198) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0xb94f, 0x1, &(0x7f0000001580)=[{&(0x7f00000001c0)="bbfea5126046cf9e15434c", 0xb}], 0x10000, 0x0) [ 79.667893] Code: 03 80 3c 02 00 0f 85 a4 02 00 00 49 8b 9c 24 e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 38 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 70 02 00 00 4d 8d 6c 24 08 48 8b 9b 38 05 00 [ 79.686985] RIP: bd_set_size+0x58/0x320 RSP: ffff8881d6d4fc60 [ 79.696644] ---[ end trace fe81e57e022b7e9c ]--- [ 79.701462] Kernel panic - not syncing: Fatal exception [ 79.707171] Kernel Offset: 0x3c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 79.718004] Rebooting in 86400 seconds..