[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 9.914110] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.369996] random: crng init done Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2019/09/21 15:23:34 fuzzer started 2019/09/21 15:23:36 dialing manager at 10.128.0.26:39101 2019/09/21 15:23:36 syscalls: 1372 2019/09/21 15:23:36 code coverage: enabled 2019/09/21 15:23:36 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/21 15:23:36 extra coverage: extra coverage is not supported by the kernel 2019/09/21 15:23:36 setuid sandbox: enabled 2019/09/21 15:23:36 namespace sandbox: enabled 2019/09/21 15:23:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/21 15:23:36 fault injection: kernel does not have systematic fault injection support 2019/09/21 15:23:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/21 15:23:36 net packet injection: enabled 2019/09/21 15:23:36 net device setup: enabled 15:23:59 executing program 0: r0 = socket$inet6(0xa, 0x8004808000080003, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}}, 0x0) 15:23:59 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/101, 0x65, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 15:23:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000340)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 15:23:59 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x46) 15:23:59 executing program 3: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:23:59 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0xa0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e1, 0x100000) [ 72.742835] audit: type=1400 audit(1569079439.492:5): avc: denied { sys_admin } for pid=2084 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 72.845311] audit: type=1400 audit(1569079439.602:6): avc: denied { net_admin } for pid=2089 comm="syz-executor.5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 73.235201] audit: type=1400 audit(1569079439.992:7): avc: denied { sys_chroot } for pid=2091 comm="syz-executor.2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 15:24:00 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x80008002, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400000003fd, 0x0) write(r0, &(0x7f0000000040)="9c", 0x1) [ 73.260625] audit: type=1400 audit(1569079440.012:8): avc: denied { associate } for pid=2090 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 73.298924] PF_BRIDGE: RTM_SETLINK with unknown ifindex 15:24:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x1, 0x0, 0xb, 0x0, 0x0, 0x48}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x9c, &(0x7f000000cf3d)=""/195}, 0x48) 15:24:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0) 15:24:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 15:24:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x875b2a7, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x9000000, 0x400000) 15:24:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0x1f}, 0x0, 0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x4) 15:24:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000740)={{0x1cf, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x3e3}}, 0x20) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) creat(0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r1, &(0x7f00000017c0), 0x2cb, 0x400000000000) [ 73.405904] audit: type=1400 audit(1569079440.162:9): avc: denied { net_raw } for pid=2267 comm="syz-executor.4" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 73.412814] audit: type=1400 audit(1569079440.162:10): avc: denied { dac_override } for pid=2269 comm="syz-executor.1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 73.440715] audit: type=1400 audit(1569079440.192:11): avc: denied { prog_load } for pid=2265 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:24:00 executing program 2: 15:24:00 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11}) 15:24:00 executing program 3: 15:24:00 executing program 4: 15:24:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/101, 0x65, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 15:24:00 executing program 1: 15:24:00 executing program 3: 15:24:00 executing program 4: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0, 0x16b}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:24:00 executing program 2: 15:24:00 executing program 1: 15:24:00 executing program 0: 15:24:00 executing program 3: 15:24:00 executing program 1: 15:24:00 executing program 2: 15:24:00 executing program 0: 15:24:01 executing program 1: 15:24:01 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) 15:24:01 executing program 2: 15:24:01 executing program 3: 15:24:01 executing program 0: 15:24:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000200)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}]}, 0x30}}, 0x0) 15:24:01 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="086310400000000000000000", @ANYRES64, @ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 15:24:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='udf\x00b\xdd\xd3\xb5\xcd\xbay\xb4\'Y\xa8\xcai\x8d\xcc\x10\xfaZ\xc4#\xd5\xb0\xe3\xbb\x01[\x83\x8c\x06z\xcb\xbd\nW\xa7n>\xcb\xecX\xf0\xbdA@\xc7\xad\xa7/\xfc7\xc0\x8b\xb4\xd9\xa2c\xd2u\xea?\xea\xa1\x03\xb0\x92-\x84\xbf\x06r\x80\xcf\xd2\xd0\xd70\x98\\\xa47\xc0w\x836\\U\xf4v:Pw\x84f~\x9f\xd5Q7\t\xa5\xc9[\x996HI\xd5\xcc\x86\x03&\f\xab)\x1ag^\xb8\xa2>/\xc9Fc]\xf6\xa6\xc9\xb6\xf0\x8ca\\\xcd\xe6\xe2^XV\xcb\xe9\xd3\x9f\xbe\xbfR=\x9b;*\a\v\xa6\x0f\x1a7\xca\x96_\xfb]\x1c\xb9\xbf\xd2w\xd1\xc4q.ol\xf4\xd9H\x86\x8b\x1b\xc6eN\xfd\xde6\xeeO\x1319\xa9\xb7\xa9', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:24:01 executing program 0: 15:24:01 executing program 2: 15:24:01 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 15:24:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000014) 15:24:01 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='udf\x00b\xdd\xd3\xb5\xcd\xbay\xb4\'Y\xa8\xcai\x8d\xcc\x10\xfaZ\xc4#\xd5\xb0\xe3\xbb\x01[\x83\x8c\x06z\xcb\xbd\nW\xa7n>\xcb\xecX\xf0\xbdA@\xc7\xad\xa7/\xfc7\xc0\x8b\xb4\xd9\xa2c\xd2u\xea?\xea\xa1\x03\xb0\x92-\x84\xbf\x06r\x80\xcf\xd2\xd0\xd70\x98\\\xa47\xc0w\x836\\U\xf4v:Pw\x84f~\x9f\xd5Q7\t\xa5\xc9[\x996HI\xd5\xcc\x86\x03&\f\xab)\x1ag^\xb8\xa2>/\xc9Fc]\xf6\xa6\xc9\xb6\xf0\x8ca\\\xcd\xe6\xe2^XV\xcb\xe9\xd3\x9f\xbe\xbfR=\x9b;*\a\v\xa6\x0f\x1a7\xca\x96_\xfb]\x1c\xb9\xbf\xd2w\xd1\xc4q.ol\xf4\xd9H\x86\x8b\x1b\xc6eN\xfd\xde6\xeeO\x1319\xa9\xb7\xa9', 0x0, 0x0) [ 74.387278] binder: 2336:2340 BC_FREE_BUFFER uffffffffffffffff no match [ 74.403482] binder: 2336:2340 BC_INCREFS_DONE u0000000000000000 no match 15:24:01 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 15:24:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x1c, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) 15:24:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 15:24:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/101, 0x65, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 15:24:01 executing program 4: execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:24:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008000)=""/144, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000380)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}, @exit_looper, @acquire={0x40046305, 0x2}, @exit_looper], 0x14, 0x0, &(0x7f0000000400)="aa3890b8ff63608c49363e2c5418388086b8ccd9"}) [ 74.441025] binder: 2336:2340 transaction failed 29189/-22, size 0-0 line 3013 [ 74.477431] binder: undelivered TRANSACTION_ERROR: 29189 15:24:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x23b) 15:24:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/128, 0x80}], 0x2, 0x0) 15:24:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) mkdirat(r1, &(0x7f0000010280)='./file0\x00', 0x0) 15:24:01 executing program 0: [ 74.547901] binder: 2384:2388 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 74.566464] binder: 2384:2388 transaction failed 29189/-22, size 0-0 line 3013 [ 74.584351] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.594673] binder: 2384:2401 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 74.602342] binder: 2384:2401 transaction failed 29189/-22, size 0-0 line 3013 [ 74.610147] binder: undelivered TRANSACTION_ERROR: 29189 15:24:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x1c, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) 15:24:01 executing program 2: 15:24:01 executing program 4: 15:24:01 executing program 0: 15:24:01 executing program 3: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 15:24:02 executing program 1: 15:24:02 executing program 2: 15:24:02 executing program 0: 15:24:02 executing program 3: 15:24:02 executing program 4: 15:24:02 executing program 3: 15:24:02 executing program 2: 15:24:02 executing program 3: 15:24:02 executing program 1: 15:24:02 executing program 4: 15:24:02 executing program 0: 15:24:02 executing program 5: 15:24:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x875b2a7, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400000) 15:24:02 executing program 5: r0 = socket(0x2, 0xc003, 0x0) r1 = socket(0x2, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) fcntl$setstatus(r3, 0x4, 0x80) pwritev(r3, &(0x7f00000003c0), 0x273, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r2, 0x0) getsockname$inet(r1, 0x0, &(0x7f0000000140)) connect$unix(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10) 15:24:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) 15:24:02 executing program 1: setitimer(0x0, &(0x7f0000000600)={{}, {0x0, 0x2cd6}}, 0x0) poll(0x0, 0x0, 0x8) setitimer(0x0, &(0x7f0000000000)={{}, {0x4}}, &(0x7f0000000080)) getpid() 15:24:02 executing program 3: 15:24:02 executing program 0: 15:24:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf0") 15:24:02 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote, {[@ra={0x94, 0x6}]}}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:24:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x15f) 15:24:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x40, r1, 0x101, 0x0, 0x40030000000000, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x40}}, 0x0) 15:24:02 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670b, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:24:02 executing program 0: r0 = socket(0x10000000011, 0x8000000003, 0x0) close(r0) r1 = socket(0x2, 0x8002, 0x0) connect$unix(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x10) writev(r0, &(0x7f0000000380)=[{0x0}], 0x1) 15:24:02 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670b, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) tkill(0x0, 0x0) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:24:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) [ 75.477205] audit: type=1400 audit(1569079442.232:12): avc: denied { net_bind_service } for pid=2459 comm="syz-executor.4" capability=10 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 15:24:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="516f0d83e208b039f2e6a6ae88a8", 0x0, 0xc60}, 0x28) 15:24:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x5) 15:24:02 executing program 2: socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:24:02 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_names='\x00\x90q\x00'}) [ 75.491056] audit: type=1400 audit(1569079442.242:13): avc: denied { create } for pid=2465 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:24:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000100)=[@decrefs], 0x0, 0x0, 0x0}) 15:24:02 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='maps\x00') getuid() prctl$PR_SET_THP_DISABLE(0x29, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) 15:24:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 15:24:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$P9_RWRITE(r0, &(0x7f0000000100)={0xb}, 0xb) [ 75.492201] audit: type=1400 audit(1569079442.242:14): avc: denied { write } for pid=2465 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 75.551965] SELinux: mls: truncated level [ 75.561019] SELinux: mls: truncated level [ 75.746132] binder: 2515:2523 DecRefs 0 refcount change on invalid ref 0 ret -22 15:24:02 executing program 1: 15:24:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/38) 15:24:02 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:24:02 executing program 2: 15:24:02 executing program 5: 15:24:02 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670b, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) tkill(0x0, 0x0) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:24:02 executing program 2: 15:24:02 executing program 4: 15:24:02 executing program 1: 15:24:02 executing program 5: 15:24:02 executing program 2: 15:24:02 executing program 4: 15:24:02 executing program 1: 15:24:02 executing program 0: 15:24:02 executing program 5: 15:24:02 executing program 1: 15:24:02 executing program 2: 15:24:02 executing program 3: socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000120003070000ffde00000000ac1414bb8000000000000083beb8e99e13cd5e8fb4b8a2d9"], 0x28}}, 0x0) 15:24:02 executing program 4: 15:24:02 executing program 5: 15:24:02 executing program 1: 15:24:02 executing program 2: 15:24:02 executing program 0: 15:24:02 executing program 2: 15:24:02 executing program 5: 15:24:02 executing program 4: 15:24:02 executing program 0: 15:24:02 executing program 1: 15:24:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x3, 0x1100082) r2 = memfd_create(&(0x7f0000000200)='/\xd2\a\xaa(\t0\xedj\\\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\xf8\x03\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bQ\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x16, 0x1c, "fa71ca12880ee1bd55d4b462b92a2c00fd7a3cc504000000009c302a027a305da4a7d9fc9a4603e69e23f08f0909a983d071f25d38b1978c00", "f83c0f2ca28b2f3829463149455e0700cc50afcfc638bb491fcec6565f4e658373ccfdaad19802000000f6c169d7992100", "2e4fc451b240ecc1bc6e25c90f1dcf80de938c00000000001900"}) 15:24:02 executing program 3: 15:24:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)={@multicast2, @empty, 0x0, 0x400000000000000e}, 0x20000090) 15:24:02 executing program 5: 15:24:02 executing program 0: 15:24:02 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x10000201041, 0x0) open(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) 15:24:02 executing program 0: 15:24:02 executing program 5: 15:24:02 executing program 2: 15:24:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x6, &(0x7f0000000080)={@multicast2, @empty, 0x0, 0x400000000000000e}, 0x20000090) 15:24:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 15:24:02 executing program 0: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 76.185451] loop_reread_partitions: partition scan of loop3 (úqʈá½UÔ´b¹*,) failed (rc=-13) [ 76.224285] loop_reread_partitions: partition scan of loop3 () failed (rc=-13) 15:24:03 executing program 4: r0 = socket(0x10000000011, 0x8000000003, 0x0) close(r0) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="82022e2fac1400ff7d81afe46d5733e0f29384d0829696473d48e4c734a899f96f0b224ec765ed0e76d93c6b6fed71d420a58fe43bea7a07246ebf00d0e949faac55a52f7dc8062782813c8cefcfdb1bd4f9c0e36d58ab4f79a66de7fb584d38a6acb07c62f547d55587267ba5050932ed612e5ffe044f6806783de26753d6fdc2ef47b4d2c38f572cf51ad724dd92f009000000000000006198a9ebdf1b7ebb57e75bb2dc6657ddac47a47e1d36a82818af28ea997e3ea944df0430b67f055df2b473f9c2f7a5daa530239fc1ecc440000447c89263b7abec43beaf656f936230157625edfdf52598a2d92eb2534c2d7ceac6f705d4729f7c40b3dffccd0e67beab3b0cb0c1b705f6b4300048c4c0db6c55a02a05961e2dcddadb9edd8a568f564b50217824b0aa5560ea147f1bd941f986fc40027f2f064b23f1e1692c35dbdc77d3d79c942baa127a4dc3f33daa93994e65ae4b3d79c2a5fbbae982719574a7fb17bdf63dd0dd7cd58ab6fbf8dcbefc1810249f9474588ae4a4fd2ef349840968058ed9d4e8071f5893c905d437fe172cd8843f5b9547efabdebc80b6f7241c42126a2446cd39496c1c113c67f3107f5351a80d85cee30aa1cd67fe8d060e695f27c0df76e2b5e5e62a5425e66bb2d1189240d20984cc92de9b03244c3551eadc42491ed0d84712fdd3dee1bbecda2db70e165474298179b04e6c65241474a3433751c3bb9454183d79da828de4479d32b008b685d9ee6980f52a8bed2a094783e959af400757633a1a73147872835b40d35cee64f2d24736930e69c3270b5c4b2bad90a6d30e00000000c5e50cf4f78e3d89d596a311a87212a624e7fe1cd2430718a0d95f63127972168a2b2487be457c27894197dd30ff314013be2e0b77941d66dc32a3cb7cab689d09db55d866a15d39d73984ba13098b991ab9f27d860874a3587d770de8da44b2d2a48ba4013d0fbbd4c2482c96ce80d35e1f6c6da4c277e703d1c5a27c47c5ff4353d8d96ce4980ba09e3d46d29ee4880dd1bcb63ce4a9206d3413337cf1b99994508ee05d00fe4f3ecc8119ef56fa46988d877976aaa06202096213b3b8e0096d5bce0aba8f0fbacd5cac173e255ada8f729260787619ee46e6a1a93ef1f42ef7ec382f7108ba692fc391aabcc0d674"], 0x10) writev(r0, &(0x7f0000000380)=[{0x0}], 0x1) 15:24:03 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x5}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x80000002) 15:24:03 executing program 5: keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) 15:24:03 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) close(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:24:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/101, 0x65, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) [ 76.283481] loop_reread_partitions: partition scan of loop3 (úqʈá½UÔ´b¹*,) failed (rc=-13) [ 76.309265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=2627 comm=syz-executor.2 [ 76.323882] loop_reread_partitions: partition scan of loop3 () failed (rc=-13) 15:24:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b") 15:24:05 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x39, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="086310400000000000000000000000000000000003630840", @ANYRES64, @ANYBLOB="0063404002", @ANYRES64], 0x9, 0x0, &(0x7f0000000600)="d25aaf31891fb94f4d"}) 15:24:05 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:24:05 executing program 3: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)="d2"}) 15:24:05 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0xa0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x100000) 15:24:05 executing program 4: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="086310400000000000000000", @ANYRES64, @ANYBLOB='\x00c@@'], 0x4, 0x0, &(0x7f0000000600)="d25aaf31"}) 15:24:05 executing program 5: 15:24:05 executing program 3: 15:24:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) 15:24:05 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 15:24:06 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'bond0\x00', @ifru_names='\x00\x90q\x00'}) 15:24:06 executing program 0: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="086310400000000000000000", @ANYRES64, @ANYBLOB='\x00c@@'], 0x4, 0x0, &(0x7f0000000600)="d25aaf31"}) [ 79.211736] binder: 2657:2660 BC_FREE_BUFFER uffffffffffffffff no match [ 79.223022] binder: 2658:2675 BC_FREE_BUFFER uffffffffffffffff no match 15:24:06 executing program 1: [ 79.223032] binder: 2658:2675 BC_INCREFS_DONE u0000000000000000 no match [ 79.223045] binder: 2658:2675 transaction failed 29189/-22, size 0-0 line 3013 [ 79.223286] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.225144] binder: 2658:2677 BC_FREE_BUFFER uffffffffffffffff no match [ 79.225154] binder: 2658:2677 BC_INCREFS_DONE u0000000000000000 no match [ 79.225166] binder: 2658:2677 transaction failed 29189/-22, size 0-0 line 3013 [ 79.225366] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.247321] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 79.266930] binder: 2687:2691 BC_FREE_BUFFER uffffffffffffffff no match [ 79.266945] binder: 2687:2691 BC_INCREFS_DONE u0000000000000000 no match [ 79.266957] binder: 2687:2691 transaction failed 29189/-22, size 0-0 line 3013 [ 79.267183] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.269218] binder: 2687:2694 BC_FREE_BUFFER uffffffffffffffff no match [ 79.269228] binder: 2687:2694 BC_INCREFS_DONE u0000000000000000 no match [ 79.269242] binder: 2687:2694 transaction failed 29189/-22, size 0-0 line 3013 [ 79.269431] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.397996] binder: 2657:2660 BC_INCREFS_DONE u0000000000000000 no match [ 79.404842] binder: 2657:2660 BC_FREE_BUFFER uffffffffffffffff no match [ 79.411587] binder: 2657:2660 got transaction to invalid handle 15:24:06 executing program 2: 15:24:06 executing program 0: 15:24:06 executing program 4: 15:24:06 executing program 1: 15:24:06 executing program 0: 15:24:06 executing program 1: 15:24:06 executing program 4: [ 79.417667] binder: 2657:2660 transaction failed 29201/-22, size 0-0 line 3013 [ 79.426475] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.432496] binder: 2657:2660 BC_FREE_BUFFER uffffffffffffffff no match [ 79.439377] binder: 2657:2660 BC_INCREFS_DONE u0000000000000000 no match [ 79.446300] binder: 2657:2660 BC_FREE_BUFFER uffffffffffffffff no match [ 79.453111] binder: 2657:2660 got transaction to invalid handle [ 79.459216] binder: 2657:2660 transaction failed 29201/-22, size 0-0 line 3013 [ 79.466659] binder: undelivered TRANSACTION_ERROR: 29201 15:24:06 executing program 5: 15:24:06 executing program 3: 15:24:06 executing program 2: 15:24:06 executing program 0: 15:24:06 executing program 1: 15:24:06 executing program 4: 15:24:06 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x10000201041, 0x0) open(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000013) 15:24:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) dup2(r2, r0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 15:24:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x2010, 0x0) 15:24:06 executing program 0: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="eabe9f303b222957eecbc62428a82d2759621c4f25aca1877c7e5255f910c28f5e87a648b9546a1ebed56adb3b91e741cc230dab56ad8e39ba079b906da58a5d1ab04e9d752a92806db0c8541ab3234dedb663fc73c7fe3c32325c4541008239fb1aace0ec8aaeca96b11a0d6e07106a0b90a1a706037fe7f2de1ae06b6159e593831cbe6402508c5fa80ff01fabc1124af72bcd6bc0d826dd695b83e34f00c08df1183f833a52468f69", @ANYRESOCT, @ANYRES32], 0x0, 0xc5}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:24:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5f5e0ff}, [@ldst={0x1, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x9c, &(0x7f000000cf3d)=""/195}, 0x48) 15:24:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r1, r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r4, r5, 0x0) keyctl$unlink(0x9, r1, r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket(0x10, 0x2, 0x0) syslog(0x9, &(0x7f00000000c0)=""/147, 0x94) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') syncfs(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendfile(r6, r7, 0x0, 0x80000008000000b) 15:24:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080), 0x4) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x22080, 0x24) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x8, 0x81c, 0xdd}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeef}, 0x0) 15:24:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r2, 0xd, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x3, 0x0, {0x2, 0x0, 0x100, 0xc8, r3}, [@IFA_LOCAL={0x8}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x28}}, 0x2040) 15:24:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) recvmmsg(r1, &(0x7f0000002880)=[{{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)=""/11, 0xb}], 0x5, &(0x7f0000000840)=""/237, 0xed}, 0x101}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/244, 0xf4}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000a80)=""/24, 0x18}, {&(0x7f0000000ac0)=""/159, 0x9f}, {&(0x7f0000000b80)=""/50, 0x32}], 0x5}, 0x553a}, {{&(0x7f0000000c00)=@caif=@rfm, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c80)=""/120, 0x78}, {&(0x7f0000000d00)=""/136, 0x88}, {&(0x7f0000000dc0)=""/194, 0xc2}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/115, 0x73}], 0x5, &(0x7f0000001f80)=""/41, 0x29}, 0x6}, {{&(0x7f0000001fc0)=@l2, 0x80, &(0x7f0000002280)=[{&(0x7f0000002040)=""/229, 0xe5}, {&(0x7f0000002140)=""/224, 0xe0}, {&(0x7f0000002240)=""/51, 0x33}], 0x3, &(0x7f00000022c0)=""/211, 0xd3}}, {{&(0x7f00000023c0)=@nfc_llcp, 0x80, &(0x7f0000002780)=[{&(0x7f0000002440)=""/97, 0x61}, {&(0x7f00000024c0)=""/148, 0x94}, {&(0x7f0000002580)=""/138, 0x8a}, {&(0x7f0000002640)=""/163, 0xa3}, {&(0x7f0000002700)=""/101, 0x65}], 0x5, &(0x7f00000027c0)=""/142, 0x8e}}], 0x5, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x7, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @empty}}}, 0x104) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f00000001c0)=""/157, &(0x7f0000000000)=0x9d) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000140)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000003c0)=""/251, 0xfb}, 0xa8}], 0x1, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 15:24:06 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x1, [@dev={0xac, 0x14, 0x14, 0xf}]}, 0x14) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) 15:24:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fchdir(r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fchdir(r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r3, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r4, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r2, 0x5473, &(0x7f0000000500)=0x1) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r6, &(0x7f0000000a80)) write$P9_RGETLOCK(r2, &(0x7f0000000140)={0x25, 0x37, 0x2, {0x1, 0x8000, 0x7, r6, 0x7, '+)proc$'}}, 0x25) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r1, 0x5473, &(0x7f0000000500)=0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @empty, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x5e, r7, 0xee00}, {0x8, 0x0, 0x6, 0xffff, 0x200, 0xff, 0x20, 0x10000}, {0x1000, 0x2, 0x0, 0x9}, 0x7fffffff, 0x0, 0x3, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d2, 0x6d}, 0x5, @in=@broadcast, 0x0, 0x0, 0x0, 0x5e7, 0xff, 0x0, 0x4}}, 0xe8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) [ 80.158648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket pig=2753 comm=syz-executor.5 15:24:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pipe(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8000, 0x0) fallocate(r2, 0x4, 0x0, 0xffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x81) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockname$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000380)=0x6e) ftruncate(r6, 0x2008002) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffeda) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000300)={0xffffffff, 0x68, "e4ffd6cac3620d9a36c866c8774fec61b95a8c090be198f1707e5075e088a18ae4ca9d99fe3a637c531cea08c34e5e8c8035bf8caeb2ed87cf41d757bc376485919694e1dae1892783555a78b1330c33594aa29c5e0f48e2e13b132494a9a50cad86698a889b7cd0"}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x2}, 0x8) sendfile(r4, r6, 0x0, 0x8000fffffffe) fcntl$setflags(r8, 0x2, 0x1) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="a4", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, 0x0, 0x20002000005) io_setup(0x3, &(0x7f00000001c0)) r9 = socket(0x5750918326d49010, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f00000000c0)=0xffff, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000003c0)=0x3812, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) [ 80.258130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25955 sclass=netlink_route_socket pig=2753 comm=syz-executor.5 15:24:09 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x17fe, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x10040, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x7f, 0x7, 0x2000}, 0xfffffffffffffdeb) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r3 = dup2(r2, r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x6) tee(r4, r3, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x16) write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='6'], 0x1) 15:24:09 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x101000, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r6, &(0x7f0000000a80)) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000600)=r6) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x863813f485703cf0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r7, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) getpid() sendfile(r7, r7, &(0x7f0000000240), 0x2008000fffffffe) ioctl$TCGETS(r7, 0x5401, &(0x7f0000000280)) ptrace$cont(0x18, 0x0, 0xff, 0x8) setresuid(0x0, 0x0, 0x0) mkdirat(r7, &(0x7f0000000080)='./file1\x00', 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="6c0f88931ab9bb2cdef2a596e3638317002bcbc8418134e53024f4baa02e7dc79601482302bf67fac0f77d25e990180f545a2448ffa22a4051f68272eb0a1debe0135182a58a5243fd23cdedff8cb9bf57d8ed312c6ac99e0507645cc2b95db5b417b6aeac41f4", 0x67}, {&(0x7f0000000300)="bdff", 0x2}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14c}, 0x8000) connect$packet(r0, &(0x7f0000000140)={0x11, 0x10, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x06\x00\x00\x00\x00 \x00\x00', 0x0) write$binfmt_elf64(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000400842e6332c0e39a4a5be70c3100000040000000dfffffff000000355700"], 0x39) execveat(r8, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 15:24:09 executing program 5: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x12, 0x1, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)=0x400000) 15:24:09 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x1000000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000cc0)=""/2, 0x34250537) unshare(0x60200) getdents64(r0, 0x0, 0x0) 15:24:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pipe(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8000, 0x0) fallocate(r2, 0x4, 0x0, 0xffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x81) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockname$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000380)=0x6e) ftruncate(r6, 0x2008002) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffeda) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000300)={0xffffffff, 0x68, "e4ffd6cac3620d9a36c866c8774fec61b95a8c090be198f1707e5075e088a18ae4ca9d99fe3a637c531cea08c34e5e8c8035bf8caeb2ed87cf41d757bc376485919694e1dae1892783555a78b1330c33594aa29c5e0f48e2e13b132494a9a50cad86698a889b7cd0"}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x2}, 0x8) sendfile(r4, r6, 0x0, 0x8000fffffffe) fcntl$setflags(r8, 0x2, 0x1) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="a4", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, 0x0, 0x20002000005) io_setup(0x3, &(0x7f00000001c0)) r9 = socket(0x5750918326d49010, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f00000000c0)=0xffff, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000003c0)=0x3812, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15:24:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pipe(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8000, 0x0) fallocate(r2, 0x4, 0x0, 0xffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x81) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockname$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000380)=0x6e) ftruncate(r6, 0x2008002) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffeda) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000300)={0xffffffff, 0x68, "e4ffd6cac3620d9a36c866c8774fec61b95a8c090be198f1707e5075e088a18ae4ca9d99fe3a637c531cea08c34e5e8c8035bf8caeb2ed87cf41d757bc376485919694e1dae1892783555a78b1330c33594aa29c5e0f48e2e13b132494a9a50cad86698a889b7cd0"}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x2}, 0x8) sendfile(r4, r6, 0x0, 0x8000fffffffe) fcntl$setflags(r8, 0x2, 0x1) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="a4", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, 0x0, 0x20002000005) io_setup(0x3, &(0x7f00000001c0)) r9 = socket(0x5750918326d49010, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f00000000c0)=0xffff, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000003c0)=0x3812, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15:24:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xffffffffffffff34) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2cc20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettfilter={0x74, 0x2e, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, r3, {0xfff3, 0xc}, {0xfff2, 0x4fedaadfab70ea15}, {0xffe0, 0xb}}, [{0x8, 0xb, 0xfc8d}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40ae}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044}, 0x40000c0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) 15:24:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x100002000000105, &(0x7f0000000080)=0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x200000f, 0x11, r3, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x800005) recvmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 15:24:09 executing program 5: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, 0x0, 0x80800, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000a80)) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r6, &(0x7f0000000a80)) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r8, &(0x7f0000000a80)) r9 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r10, &(0x7f0000000a80)) sched_rr_get_interval(r10, &(0x7f0000000180)) timer_create(0x5, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000044000)) poll(0x0, 0x0, 0x200) gettid() fcntl$getownex(r1, 0x10, &(0x7f0000000040)) timer_create(0x2, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={&(0x7f0000000080)="b74ff9e632dea307398e280a3b97ad09b16c5304120e6d6f8fdaf14b086239fd8ad5aad2e5ead8d76364ef1a4f345d52ea6f17c5948f7021fe497971b9f7c22c99e3c39efd9a1f3916f76ac70e6072bce14770e03dc717bfce7b4ffbbc39902cfe3c638b8fe0991991ab4dea561f4c6e776a9be421a0b8c92b06baad3c0d0bca40eff092027f0ac19b4cc930b76fa6ed8c2778e2613797bf500f5d26eb710097c6d04e60f2a0622a2ac9644f5d1366640ead98766f8c6d6e111c21e1b60a111a2a9f551bfb9a19f1c49be3fd565e5a98f059ac6b8f68f7e73be5a73c6db50e3c97c7879ff9ea8d892d41f90f", &(0x7f00000001c0)="e201ecc4120bd185a0ebbbe7fa6fce8c95448c9ec06be7503c338c4c5372596b741bfe4b89a1cf83f91524898255669534eea43149f8dd355a6e27598a900172ee382ea482eeff29d002eab82ad439a3581883521f0f51a35dc93ee8ef8f"}}, &(0x7f0000000300)=0x0) timer_delete(r11) timer_getoverrun(r11) r12 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r12, 0x13) tkill(r0, 0x1000000000016) [ 83.271485] audit_printk_skb: 3 callbacks suppressed [ 83.271497] audit: type=1400 audit(1569079450.022:16): avc: denied { setuid } for pid=2806 comm="syz-executor.4" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 83.576937] syz-executor.0 (2831) used greatest stack depth: 23576 bytes left 15:24:10 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/245, 0xf5) lseek(r0, 0xfffffffffffffffc, 0x1) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000200), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000380)=""/74) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000240)={0x101, {{0xa, 0x4e23, 0x2b3d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1d600}}}, 0x104) socket$unix(0x1, 0x1, 0x0) r4 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x180800) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) fsetxattr(r4, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='\xaa\x00', 0x2, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={{0x2, 0x0, @reserved="b6f87f6180be5b091a577cbb1251bb5fea5bd1d8dc430727686d0443fa0d1b28"}}) 15:24:10 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="ec"]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x4c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd8ba}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}]}, 0x4c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x7, 0x1, 0x2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0xc7, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6fb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x24}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x504}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8183}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x48090) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 15:24:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x1) exit(0x0) pread64(r0, 0x0, 0x16e, 0x3) 15:24:10 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) clone(0xba101800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) wait4(0x0, 0x0, 0x0, 0x0) 15:24:10 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x240, 0x0, 0x0) 15:24:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) lseek(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r1, &(0x7f0000000a80)) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f0000000040)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000015, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00009be000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000300)={0x10000003ff, 0x6, 0x9, 0x100000003}, 0x10) write$UHID_INPUT2(r2, &(0x7f00000000c0)={0xc, 0xe3, "2e65f937b48386ada6f9dc2d075b3f43bef70c0dd9b4e812174e7a2f9aad1349780257d9804269cc0c6ea3f8245445739ced40dd2a279b67f1081486917d594760c1a5fb15741eb7fc0fbd57c3cfe89583095ed4c293ce06e323845ca522552683e758d6dd52acb4fedfae6f452956d99f776e4bf127c7e941fc849c7f239e191e69d9425d999ec0caa840fb5f0f426b3f144dc296f5e08584a0f5abba6896c8b19a27bfef95597ee7ced0a0a4336380d588b8a1ef02b70fe81a0beed1e11e0dc2e30f1a82ebbde149d642bbfbe1e121ce9340bad8440c6a4fce51101d38a6d2928fc6"}, 0xe9) open(0x0, 0x20000, 0x38) 15:24:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pipe(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8000, 0x0) fallocate(r2, 0x4, 0x0, 0xffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x11, 0x800000003, 0x81) bind(r5, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) getsockname$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000380)=0x6e) ftruncate(r6, 0x2008002) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffeda) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000300)={0xffffffff, 0x68, "e4ffd6cac3620d9a36c866c8774fec61b95a8c090be198f1707e5075e088a18ae4ca9d99fe3a637c531cea08c34e5e8c8035bf8caeb2ed87cf41d757bc376485919694e1dae1892783555a78b1330c33594aa29c5e0f48e2e13b132494a9a50cad86698a889b7cd0"}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x2}, 0x8) sendfile(r4, r6, 0x0, 0x8000fffffffe) fcntl$setflags(r8, 0x2, 0x1) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="a4", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, 0x0, 0x20002000005) io_setup(0x3, &(0x7f00000001c0)) r9 = socket(0x5750918326d49010, 0x800000003, 0x0) bind(r9, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f00000000c0)=0xffff, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f00000003c0)=0x3812, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15:24:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x80000001, 0x80, 0x7fff, 0x5}) ftruncate(r1, 0x40000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x3, 0xffffffffffffffdd) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x204e20, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x1, 0x20, 0x9}) sendfile(r0, r1, 0x0, 0xffe4) 15:24:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) lseek(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r1, &(0x7f0000000a80)) wait4(r1, &(0x7f0000000000), 0x1, &(0x7f0000000040)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000015, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00009be000/0x2000)=nil, 0x2000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000300)={0x10000003ff, 0x6, 0x9, 0x100000003}, 0x10) write$UHID_INPUT2(r2, &(0x7f00000000c0)={0xc, 0xe3, "2e65f937b48386ada6f9dc2d075b3f43bef70c0dd9b4e812174e7a2f9aad1349780257d9804269cc0c6ea3f8245445739ced40dd2a279b67f1081486917d594760c1a5fb15741eb7fc0fbd57c3cfe89583095ed4c293ce06e323845ca522552683e758d6dd52acb4fedfae6f452956d99f776e4bf127c7e941fc849c7f239e191e69d9425d999ec0caa840fb5f0f426b3f144dc296f5e08584a0f5abba6896c8b19a27bfef95597ee7ced0a0a4336380d588b8a1ef02b70fe81a0beed1e11e0dc2e30f1a82ebbde149d642bbfbe1e121ce9340bad8440c6a4fce51101d38a6d2928fc6"}, 0xe9) open(0x0, 0x20000, 0x38) 15:24:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/210) fadvise64(r0, 0x0, 0x7, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fchdir(r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r3, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r4, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r2, 0x5473, &(0x7f0000000500)=0x1) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000000c0)) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x0, 0x5, 0x3f, 0x4, "f7da0d35a34a181bc0c6e961f9c75c92f4798744c192f19e3e4459232b16f1eb"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fchdir(r5) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r6, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r7, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r5, 0x5473, &(0x7f0000000500)=0x1) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)={0x10c0, 0xe, 0x4, 0x8, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0x9}, [@generic="4d5bb9cdb986ca39296bdec6db40d06bfebf2b3a8b077fc2c6e075c7ad7eb6698b5e42fc96049a6781247661afd55c64fe46fcb53725a0285f191515189f5e2dc344e9c2469554ed7183b50317231fcbfe988390ae8f6d3c36358f0384021312dd3b2f208f1def08ebab7cc60130d194d2cdb1c8903ca650d4b1732a5b6ad9f144efcc735cf246eb0b80fd6b10ebc2e99cfa225c4d2faaf17bb7cabc9075cd0b51d7f57dd30a", @typed={0x4, 0x4c}, @generic="9d58f236afccbd067655494efc32f69685a8356f5c5f8b555fe21ae41f56c2b0e573b5710e4af291abd1349297bca62fdde3a6d39e7db36dce1253cf7b28221ca01dc576314fc7a1de32b1ad67c74215fe65940f7294104006cfd210fe643d6296a9b06c5def99929828fa910bcb9de73586443afafdefe65ebb06f82c700acb3cc345e74137284d983aa04fb2726c3fab53ab1e6334131d0e5d463e61dcbd2931e4260798ca05868695f9eaead84abf3e77e9f27dd51c4fd851305bc26c73e992c4a059b9a114e770f818ceaee4f1915aa4f501ec51fb9b656cef652ea32b25ad21943c4869b3a88b4f3b2dcb34dc9b65b91f73f94b59f0dd61d3dc14bfc8eea994224b50fbcd311645a7059fee13fcbd393b55a2158a5c2980cf216c67f9e45830aa19ee3628415c7281728a215116d8f1fefb3ec3a5028f6405ecc1c82d7b7c99bb828c3b3fc414080aa54e699a203a291b80fbf98e48f5c1c76487c43c64148be92fd20aaabf2c4ef45312215a8710de9e6370b252288e0b98451222b6d4472afd8ef5a1775e43122e427a4a99c4346cc9fe547105bceea178a378c4ed94598271b68037ab5c3a4103939a1ba977affc1e50727791e1c65700f7a91613d5c7be3aafd3f39dcace8fbbbbba056909ed2c2c227d3002c4bccc5d1615aa9928b7fbcc541a0267133bc399b2aa186671ba020f06bffd6dcbcbab1a3ac54ec48b2bd3f556a9884fdef3f174b11743e0580b999c0ef6cdc2ce62e7da79d350b7a33963891007153fe6c70271141138da56d69e1cb59aeca2382d1f5b1d6cad7d9f4583e379b3097f35785c6f57c3b64600858713b939a99602bbf1cf3ea11bf938782d60cb4cb8ff049d3f0fc3977e5bc20c4afa468f5d5f09a1473314aad4d13ffac64fadad6244fefac39e2f01b95194b8edfe9c0ba80f467096e2aa6a9c663ae1fae2fb4e1c12e4ef9f4edf6bbbd9ecf9ee92e44a9077b22b0d5101f8d87d402060687b3f0c09290ac1e80bc346fd485b0bf834adc3d9fb86d487e82cc4d0a6cc33146d59a67e9bfe5d1c0f8981ea457c631a30892e1f75708102fb8f67419756e109a8d0c584f460c59505130f0e030314c6732cc6d8272f244d361e8a2c721cacf256af0bb433c77bb5885ec4e212472e65766102b1a452b667a0b73d5e88786bda641f4d942d88694c27514949e35865f7dcc50cfa5d974b3984178ca5ef94a8d263b506dbac4763f66f2db518b771b38202e0d71529856d617b2b9162b3f2b663e87cb79fbc7b23b9bd35fbebaa31f9c18e705265d36200af60f82f34ce2d73708ad84a6d234f7a3b311305bda163fd7addf4dd6408a5b604d6a4a71fee77e31d64eff54fa40020616423525f8e1ebfc3d92e92359835a206fa2e7a1a44735999edd625211d0eb5160232c6880512963269de5e636c3c760094d3761544c7ed1a9a67358b5ab673159c1639dff19374317b2062a74a4b61bc3e1c27e5d5c13ec49966c991a7b6ebe0073c87941a9f49ce7087b1cf71002491ca33f8ed9a0d14838078c816ec68ec6911b81eaf188a88719a628c185fd8a3a3117616d574b64ebba06514ebed4f0bfd51c8f8e4b18831b7c93177d43e9421dccac0e559511afac38a1820bddd2bf68173b406e839520e6cfed41eefccdbd740266ab39a312d14737498f088dd30d25873173e30ba55412ca9346e4c28151eb9dd4c0d3d35cec4c8c796f4e10248b47a9c54ff6a2c387229acc24ffef1eb33340b38f4925a546e6d703b72902f5bd4d208b47f0ed33271f6a596e66b91b3f05f819e99006afff5918186f143530c8b566c4fad620f325ad2642adfe7b66707750d7494790051fcf07088298bb10c336c80841a7041e1b972715c40c4177b3ed30ccb0c2d614eb3b72716054ccdce1c341a4c1e3d69fe28440cae983d866e6ae8f879fab505fa93304260e68179246da8b6218519d8897dc1e7673d3b1b119c421bdcf46a015d7a8866d4e5aa9cb949aa3b8ea2f7a07f7f71258dc9c51094939738b0128e60a42c738c4c694c783628ff9270b396f29625f13881924d1f29695770ffbc2dc46328a5e1af101b948b0c8de69364c4aee951c6a99eab1e666fa930a52db6b35ce39c5aa663620b7a14a5f16a07239fc45416fcddc3a146f3300b34ca37e84e3c46a2fbceef030aba0bef2172865b3a646879d3865eeaf9e8091161fa146f9bdaf250bec25a7a83e7d6c86c9860d42398bf14d51e03bdc2c053132e9afa9f5ee39a7ba749977d5dd2cc924006d2541140f7811c95867a728944cfb008916162055718c2ac4139f2f4fa8406fe3259eb497a2b0f50a40731ccdae1abc5de065adb164d1628b0f8e4f206f1a37ea3700f094a2bea1018a456aac14b14de337c3d05b502ffe9eda3b62dfcfda54f565f2b18e916c7d51965c8241bd93a76a845284d4052c6564c6c7f9c2b26bb1f68e36db5f61af1d659844eafb568d64dcbecb6dea9acdbdeca5b88495df01ce5ac16ef056b509a2fc5532fe75155cc5b1ea155cdd9c78a95cd4b7e76c6887e4b0867a3a37e724b303d3c2c1fd8c5cd6d7fc49109283141697b40ed419d84adb5fa7e9cd34c1cfc8111586b6e1b0bd4a48df22f77062c85119193ed1e95251be21a0972915591203d2f020e11c22c13df9fd3bf11358902a287c9cd7f159b3c00b5f370955f2a7ded8b29f059fc70917b93ab593d456a9c987a2fb83dff476130df4e483b9589bf7269750f6030d9fd6f8bd1d15ebd01520116657125c7f56560fc71e53b2df90fae812b2a2498e4f61f490c6525ac1a5827bc9adeed92c4905bfbc21eb1ca023a2d94888790396d429714d3e4cb307f81c6bc042108f960a365f0c38d355e1bd169a88f6b1cddf429cdf73a769432dfdde69811cb650f51e73c0fb494ecf2caff0c271b6aa8e01df97d08362c07cc2354fb4059d0b82b66ab60d243737a5aefdadf1599a75debce29db6caeda8070a7c260e31cd380140c76dbc82cb6838d030a48b2d7871d29c9f053cb6945b933516010413abc1a00e39e9a3bda38278b080f618d81b2d7907695507051cd63e51eecd7670e11c7226809f24fb64319521a899f553df00c502ee25cd03e31e3b73cd257f0c747dcf371dfd0c49d11c9dfda97d97b88efb6f578fdf6c25f763d53efa551e8741f25a89ee328783555df50bc6bfd2fed67b9ce3e896e62559e34ffe12beb25797a8d82dcece60723dc2ef61b8f996a13afe2530e3ed7e12ec842385e04bf0d5ebd681a8344802c235360aafab5f64b6136e73e49c78f823801d53eb8214c78a6b896cf9b3c616076ec2321befaad808f08862001b4774d88221c2736cda43b9ee3044e08b3d5f15cb446d00ad787b4120425d5e068947d1df98f4a1898d894314d4da6a715f8ba6f0cc42b7f819d4c6d5995dfce511e5fcce36158cc718aa17bc2505b3d2c90ce0c251a7fe29ffd2fd37d2cd3f60d96e47e2e4a46d72c1a32425b85326c11fd6543cf8674d87a0259ffd80a0806507fa383ae4652e27d1ea3490804513178b3ea33f4d667d0dd307ad8cd1c953a1a76d3d2729a4aed54e52de72b6700306e69bcab9133bdbf54946035daab677f4c77b7d9829a30491ca5ffdc3976d7b96e3b49c769f53c480c86ea3782554d10a38e8d9248ff7a032271912a4ec8accfa5c252a0e9ccd879e5b5d40037f1031132503545411ca3a385b6b1a19702e7c467a53adabe8137f99f7534a7bbc0f978d5ab1068f1e725aef06f9980771376bc1d7849120aec5a4a25bff4ffd92e6a9f241d2ee776d9e8807bc1f61c2584fc8b2e2462d2473e5033ac872349d9ae1e8519993fa88c95c14142821a0254923949d1d5c39b02bc4d5020dff1ba60844f22bfdc66abfc02d8d4e8bc3c161ad9eea7a18b5adcab394e62440a9f5520987be781e804b896daf453a7453f8ca0f0849e2c6a2d17ebc4b5d38ca9231ef47b95e28c3fa7ee8e48709016445ba811cd1c474f1015c8a26274c722982eee932eeed4b0319ac004bde5e19af4fa0a5d2bf330391bc3e27199bbe501515ff8e31d06363d0817f0d5e9ad04650b2f4e8eb9cef0f73a7411733737323cf0ca6083eb10259c48d3021df7df3cb8add4f110d5443df902cf63c89ce1daa53cd1cf67b55d3d4c9fb04be848a47b969e66ac95a8c9a70185941a0a9797e22dfb50ffa34686b1037bad85ef6e741ed8e825064d27b6d25b0af6f3ef5d9f98c9f7941e282972a1de4ef3bd2b4cd4e629b4103f07062c651a794b736f28825972342995acf9a73fc601583d3d0406c0ede68662a57cd6a87850f529d216bc9450d718bdb873e6913511e95b61319ce2edbfec7fa326e7a6dff28276750221ea92704334b21ad46cc6f394c30ff545f1e6c5e136f2e46066889b648f966b8dc31215cdc827f2650ea70ded367dbb8610cb2e398a5fe34d749ff9b3a92392a90199c64009faf5391a68ae14f7aca48153d83bcc03d75ba57f61e50f3cf85940ebc3a3e557465de6e7cb8694176342a0034b36662097138403009f409917c0c28a316a9e9e9e99bafcf736cad537ad3a1c99df9de8018a0aed563d566c06276714940c8fe0c747a08c7e6b72e7db140c900862770b329ee68f192760fda98596faa61db4ea6d72a650834961c14c57a8fe1a68514f1aa885d66428d39f7c8e38b247102f5f11c401ef41b7f981be9458ff166bda6d4ff1bdb867f9aceb17af82bcc1df794c03f348a682469d7f794dd709a6cf865d0da0c176f820cf40fd5d5789fc861b02cf6dcbe24f8c54fb698bbe350852a16db9ab919278d424d9fa338f13b9ee4c2d05f5c6dab446e841f29323bf46f46e51d6163d892b7d77b659206ba3ec062a6032c53055b0fba514fade3adbe0beae42823a8e20038f6906b11f28a154aa2f4a3d9d4ac20b18901583c5c4279560b92d586d89b1376c483e0d6ee0770c633f21d311b0a6362a407363e56420c169fda0b60c84998f4dcf3a84bceeb1cdd931dec190dc332fc97349464d012d980dca49923719a7d517646c59e43ad5fa6b67f496a15a885111adc20ef0ad109a6d177d87c7965cf938aae8df5e2c21f6ab890296c2939c065bb6d837ec95ab71d21e805230586220ceb90da7fca6493dd0653257b4e08777505e0d44031e446f83e9c17ea515433244b52611261f0f0d21105ae19f3dc7a3612f860b97167cd2a56df053ed9ba6cc36bd5d44137eb62f8a29216cab82037cbf4186ac9e125269cd3d1c44922cb8f1148b3c7f88a14df0ad86d535e848352df1c5e7c1382ff3cf8e348f2e8a12e9bcbfc1b3a82cc65dedd56ab3239188f1604b63f4e28ec2b8b3d967177c7991118c466639cca4d027c3a6c043fd9df350202365327d24c03ae834fac9f24693dcd36f638a0909d7329837ab68e24d3311dea0ed9b1a9400d4b49753697fa08fb0c6a87db3ea7505421c2a4edfc4275414c86c2086fcebee35846db7bca17d52adc467585f5ecee63bc826bc8cf3f881dbac819005654ffac1b18f2080dbdd8a44b04aefda9b7cb666559ee2fa85809557fb2bc673bb6925367ae88e5f4c9e57a5c0504c47368d53d85b4bf171e49b941eec6ab537ab1b1c2585b6e836c22d217b244c003fe404270ed885d00c8a10757b444510f5c73ebdaa9f921b3f81c77ac00a52cabf1b504be9e21cbb3a84f464c630a401b447cbec0c525c2741ca601bb36fd802bc154e32afbfdd3999dcacce410d315a6117077fb0e571e9427d8bbdf6df89291652a5c515e5187e37663c099ff56385e74fce"]}, 0x10c0}, 0x1, 0x0, 0x0, 0x30000080}, 0x200040d4) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3f, 0x8140) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSFF(r8, 0x402c4580, &(0x7f00000002c0)={0x53, 0x3, 0x7, {0x8, 0xd43}, {0xfffffffffffff800, 0x7}, @const={0x2, {0x3, 0x4a3, 0x1, 0x667c}}}) 15:24:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_int(r2, 0x29, 0x42, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r4, 0x801c7011, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7e, r5, 0x1, 0xb75f, 0x6, @local}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x9, 0x10, 0x100, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_AF_SPEC={0x0, 0x1a, [{0x0, 0x1c}, {}]}, @IFLA_MAP={0x0, 0xe, {0x17, 0x200, 0x18a1, 0x20, 0x2, 0x5}}, @IFLA_IFNAME={0x0, 0x3, 'bond0\x00'}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x3, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) 15:24:12 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9cde) unlink(&(0x7f0000000200)='./file0\x00') clone(0x1000000000000b0b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount$fuseblk(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x200000038) ftruncate(r0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x80000001) 15:24:12 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x402002100000004b, 0xf, 0x0, 0x0, 0x0, 0x1}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) write$selinux_load(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x100) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x40, &(0x7f0000000ffc), 0x4) fallocate(r3, 0x65, 0x140000, 0x80000001) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000080)={0x7ff, 0x4, [0x2, 0x4e0, 0x0, 0x3ff, 0x1f], 0x1f}) 15:24:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/policy\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f0000000140)=0x1, 0xfffffffffffffefb) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000440)=0xc) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000001c0)={0x80000001, 0xc5}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000480)) r5 = getpgid(r4) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x400, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x84) syz_open_procfs(r5, &(0x7f0000000140)) unshare(0x4040000000) clock_gettime(0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000780)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setown(r0, 0x8, r5) io_setup(0x800, &(0x7f00000004c0)) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0105296dccf58ac123332eccc01200000800061085ca0000fb72e90d52f500791b80ff0f0000e17ae8d000b4a7d182c25321fe4000000000000000000000000023000000000000f92ff973420c20b67a286ffd13c3b259427987b7ffde3c3d8a76c379334cde68c939ba340e409b0600000000000000ec00"/134], 0x1}}, 0x8000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000002c0)) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xffffff25) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) 15:24:12 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(0x0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78}, 0x78) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') socket$inet6(0xa, 0xc01f6b2a21803ead, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r3, 0x20000010000, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x94, 0x66, &(0x7f0000000380)="87e32b79780c61ce0f2099dd13b8f05c6ebe203900b33142e0c3f35f9748b226e35a42e9754b4f405cc1d7b32553d50264adda73e0ebe2f08818194eefe90de281c0fca21bd2f0bb60792670ed5340d4f8f469fa44fabbde527cbbc30da045f9990b87ed6b451171652ae9e28568d4826aa1e1fca4e5ee0e72a2db21b35bef60ef2085b3f150cf4b013abbcbae1652a9195ffd7e", &(0x7f0000000440)=""/102, 0x41e, 0x0, 0x18, 0xff, &(0x7f00000002c0)="c3b1eda44b38d24691237b59d62f87c936b679004bf12f29", &(0x7f00000004c0)="06c305d852112049b7e22b27d694f1d59cb49cbf59584c177a87e8bab3967cda0a5ed105218ca3e316dbabf2426620d60a1afd3db6d6e2d545b2a2447ff97a7b5d2d972ce2023b443c4a49c32d2d2f35cce92d0625f97029a5155c2088ceb46cd5a5c6d6a395a8f02bb70021316063156fff42d5f2c4defbfea6adf5f10dd9d016e9f2d264f0f5477b94f8676f038e1f298acb72c929d818803eb7c048f4edf5dfe0371872071219a893a0b0271352621dd06f9cc742e8a4186e397f9cc6f0a1a4e9457fef8d3ff1c43354b46c0fdabc4c3cd169dcb89fd16b4063ce8ee1af579dd4836dd9e48da51209c02c02d288bc9db353072944acc740c1200c1e556f"}, 0x40) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, 0x5, {0x4, 0xa0, 0x0, {0x3, 0x8, 0x1, 0x7ff, 0x1, 0x8, 0xc1e, 0x0, 0x7, 0x569f377b, 0x1, 0x0, r2, 0xff, 0x200}}}, 0x78) mknod$loop(&(0x7f0000000600)='./file0\x00', 0x20, 0x1) socket$inet(0x2, 0x2, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x11090, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') socket$unix(0x1, 0x1, 0x0) 15:24:12 executing program 2: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x9, @rand_addr="7e972fc45f1e847bc536847949e5f46e"}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000400), &(0x7f0000000540)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = geteuid() getgid() stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000540)=[0x0, 0x0]) setresgid(0x0, r8, r7) getgroups(0x2, &(0x7f0000000540)=[0x0, 0x0]) getgroups(0x2, &(0x7f0000000540)=[0x0, 0x0]) setresgid(0x0, r10, r9) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000540)=[0x0, 0x0]) setresgid(r11, r13, r12) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0xfffffef3) fchdir(r15) ioctl$FIGETBSZ(r15, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r15, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r16, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r17, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) r18 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r18, 0x0, 0x40, &(0x7f0000000ffc), 0x4) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getegid() r20 = getgid() lstat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r22, &(0x7f00000001c0), 0xfffffef3) fchdir(r22) ioctl$FIGETBSZ(r22, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r22, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r23, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r24, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) getgroups(0x7, &(0x7f0000000380)=[r17, r19, r10, r20, r10, r21, 0x0]) setresgid(0x0, 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r25, 0x0, 0x0) getgroups(0x40000000000001d5, &(0x7f0000001100)=[0x0, r5, r7, 0x0, 0x0, 0x0, r14, 0x0, r25]) r29 = geteuid() stat(0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000800)) r31 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000500)=0xc) getresgid(&(0x7f0000000680), &(0x7f0000000880), &(0x7f00000008c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000e80)={{{@in6=@loopback, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) getresgid(&(0x7f0000000a40), &(0x7f0000000940), 0x0) r34 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r34, 0x0, 0x40, &(0x7f0000000ffc), 0x4) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB="5003000000000000030000000000000006000000000000000000000000000000080000000000b302010400000000d27f510f000000000000070000000100000000000000e4000000000000000100000000000000000000000001000001000100000000001d0000000000000000000080030000008000000001000000ffffffffcb5ad8ee2178e038942b7e1569d90f00d3742ea433f15a59372ea77187c842494ec10a02733fd1d0e4fdbcf610046d3905f725762c0018", @ANYRES32=r4, @ANYRES32, @ANYBLOB="07000000ffffffff00000000030000000000000005000000000000000200000081000000790000000000000005003800000000000001000000000000000300000dd0e1a690ab0000000000080000000000000004000000ad05000006000000000000000080000000000000e60a000000000000", @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="000001000800000000000000030000000000000000000000000000000200000009000000790000000000000002000000000000000300000000000000fe030000000000000900000000000000feffffff69d40000010000000000000002000000000000008100000000000000050000000000000005000000000000000101000000000000fdffffff040000000000", @ANYRESOCT=r33, @ANYRES32=r31, @ANYBLOB="0200000061000000000000000000000000000000070000000000000005000000001000002d70707031000000010000000000000002000000000000000100000000000000030000000000000000100000000000000600000000000000030000000000000004000000000000008000000000000000000000800000000006000000000000000002000004000000c400000005000000ffff0000", @ANYRES32=r32, @ANYRES32=r33, @ANYBLOB="0fc881c7e4e03de073ce08728021ea000000ede5ea3348", @ANYRES32, @ANYPTR64=&(0x7f0000001000)=ANY=[@ANYRES64=r26, @ANYRES32, @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYPTR, @ANYRESDEC, @ANYRESHEX=r6, @ANYPTR64, @ANYBLOB="fc580758192e5610e208bd3461e89aef5097501bb37403e4c38c84b4e1c732ca19ef0615a51f35d400f7e4e644f1f8d39729856237b5c439acb077f2e8", @ANYRES32=r34, @ANYRESHEX=0x0], @ANYRES16=r28, @ANYRESOCT=r27, @ANYRESOCT], @ANYBLOB="090000009fc7030000000000050000000000000080000000000000611a000000200000007662662673653d345afaed0a090a000000"], 0x4c8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x685, 0x20004004) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x8) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000280)=""/198) getresgid(&(0x7f0000000480), &(0x7f00000004c0), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r35 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r35, 0x400454ca, 0x0) 15:24:12 executing program 3: personality(0x8) uname(&(0x7f0000000000)=""/193) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000004c04000028020000140100001401000068030000680300006803000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00014010000000000000000000000000000000000000000000000000000240041554449540000000000000000000000000000000000000000000000000001000000ac141423ac1414aaffffff00ff000000000000000000000000000000000000000000000000000000fee5ffff00000000000000000000000000000000000000000000000000000000000000000000000000ffff0000ff00000000000000000000018c0001010100cf000300076e6c6d6f6e30000000000000000000006772657461703000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c60000000000000000000000f00014010000000000000000000000000000000000000000000000000000240041554449540000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d67273c28650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000001ac1e01010f000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x498) 15:24:12 executing program 3: r0 = socket(0x9a1d911e5ccada2a, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) sync() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x5c, 0x0, &(0x7f0000000100)=[@exit_looper, @acquire_done, @increfs_done={0x40106308, 0x2}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x2}], 0xf0, 0x0, &(0x7f0000000240)="06b703a0ee17db779c97d52713d97e289be9d339e5b31859d49eff19c37fae64dd1fb722a6bf9303b5310b3ae63e8cc20116457841ffec70aed25ab7255f02cd00cc24dcec43b4c10cba7a547968bc3aeecea6de9a6703d34d6465397a56cb2c24454529f06eca02bf9e871f8b4b6daee901482c205f8328e8365b35a8254b5a092e6de1f31bfb2087ddbc5d0d5c7f74a32a7584b28162493076be5374bf6d9620e8073d4598caa05ec80d50325dffd54e6fdafcc983be02043cfca30df117e1b38d846b15dd74d4118444d5972228e5dd3932941a16072c22b910b172bdad42f180bdea9961454be00f2c0348a899ea"}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x50902, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0xffffffff7fffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') sendfile(r1, r4, 0x0, 0x88004) sendmmsg(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x3fffe83, 0x0) write(r0, &(0x7f0000000200)="1f0000000104fffff13b54c007110009f30501000b00024000002001000060", 0x1f) 15:24:13 executing program 1: r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r4, 0x80047601, &(0x7f0000001800)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0xa0, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x7}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xffffffffffffff59}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x92305718b5e0553a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x5ffc355c2b5133db}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x804000, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$unix(r7, &(0x7f0000000500)={&(0x7f00000001c0)=@abs={0x53d49cdaf514b596, 0x0, 0x4e22}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="64c0ea54c2556442f7dbb1fb0fccc2bf405f6ce4183dd444d9c94132582f4b0a98c55f76d11646f8778997cbb24d8f7e795b8bdfed8c4e8da861458432f3e5e9d8", 0x41}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="c7dc3ce9aebcef8d27bfd6736297b018e5c96afc2effb090ffb2ee531c6331c74946025fd88776b036a81f94c454c620003285f19f5cba8f2bf63ae0f1d761be3c070a36d4e590c799d5d1f6b22daab89a998971b036e9bde9102e93e50edd87f46f260ed6f1eea15693239404f4682768c7faf8490cc2c0ab782860580e6c621396757163aac3884ca386fb190db300aeadf181ef1f41bfddf3b3ca2214fe96c1b733a85f36691cd2bc4dfd353ad99966cbb827c73725d006", 0xb9}, {&(0x7f00000005c0)="4c2884788f6d6a37521a3196b0897cc5c66c360332faf06f058228508a9615292db1a498608e12777f696387cb548af83d9a36aabbfc6f5cac5c59b52b1e49936be71d164b6482ea7b32805dc3a57ef77254541a9e62a1956a25af67921b54f4dc240bd6228191d377b5dfb422856b70fb9bcc67166a84729371239de6f9f3e490f99e95a5659476f79888fe6eca9a4e08321d0d85e55a867bb3b0bca7", 0x9d}, {&(0x7f0000000680)="3aa0ab5e82adc98766b90d84aa53f7826c6de0f40ebfa2abcd5936e9e5f5bea44d36dd3187e4192b57c06de8c5e1998e69b1b56f627243bf0e62e03c9599cd44faac66eac25bebe2a86427b73e783d093edef725ed45d852d501447294c8307104ee836585823cf0be665137b8086a40c1e69dc7b2b6d41df05da9d5561e318a56b0dc0962b99a912feb981fd3", 0x8d}, {&(0x7f0000000440)="8eaa108a63aa5f78ef2c43ed4922f5384e7984c10441c7ed98b18731c834b5242ccee9663b75b14acfba7fc1c28490d3b9c7b8971279139ca437e76ea8f188390d1af94faf", 0x45}], 0x6, 0x0, 0x0, 0x40c0}, 0x4000042) ioctl$EVIOCSCLOCKID(r6, 0x80284504, &(0x7f0000ffcffc)=0x100) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 15:24:13 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @rand_addr=0x80000000}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000e46e37a83b65f1c2c13f1fc16dbcea76b7a24aee094ee8cf07020c94715f0e8dc85f649d9d35a253f2efe94f27aaa48c6afe08cc275cae7a6e24723b2bf530c67a32f822b2957bf2baa60bfc51ff6e3255e849e7cb0714a3b604992f", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x80000, &(0x7f0000000580)=ANY=[]) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffe) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000400)='./file1\x00', 0x1e, 0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x1000, &(0x7f0000000280)='/dev/input/mice\x00') getpeername$netlink(r2, &(0x7f00000004c0), &(0x7f0000000480)=0x4) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) setpriority(0x2, 0x0, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl(r5, 0x1, &(0x7f0000000340)="01dcb29925ded2221c18cfdbe5abc07aece42a8099822a53b1c7a356f26c13f2d6135b8d9054d1b8d89caed2464e057fbde5adc861598a399b4cdbc646601c0a") write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xffffff78) mremap(&(0x7f000051d000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) write$binfmt_elf64(r4, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}) syz_open_pts(r4, 0x0) mremap(&(0x7f00003ce000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f00005a3000/0x3000)=nil) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) eventfd2(0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) connect$packet(r3, &(0x7f0000000380)={0x11, 0xff, r6, 0x1, 0x3f05, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) [ 86.311609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.341433] audit: type=1400 audit(1569079453.092:17): avc: denied { setgid } for pid=2918 comm="syz-executor.2" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 15:24:13 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r3, &(0x7f0000000a80)) ptrace$cont(0x1f, r3, 0x9, 0x100000000010007) [ 87.010722] syz-executor.2 (2921) used greatest stack depth: 23304 bytes left 15:24:13 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000100)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) prctl$PR_GET_TSC(0x19, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r3, &(0x7f00000023c0)=""/4096, 0x1000) getdents64(r3, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{}, {{@in=@remote}, 0x0, @in=@loopback}}, 0x0) [ 87.121800] syz-executor.3 (2944) used greatest stack depth: 23096 bytes left [ 87.135572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:24:13 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000180)={0xfffffffffffffffd}, 0x0, 0x8) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) 15:24:15 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f0000000140)=""/241, 0xf1) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) request_key(&(0x7f0000003e80)='trusted\x00', &(0x7f0000003ec0), 0xffffffffffffffff, 0xfffffffffffffff9) getpid() 15:24:15 executing program 1: pause() mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) 15:24:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) syncfs(r0) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x9, 0xfffffffffffff001}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x5, 0xc952]) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 15:24:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001440)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/llc\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x40, &(0x7f0000000ffc), 0x4) sendto$inet(r2, &(0x7f0000000100)="fc8bfc385125badabdc4b879fb4b32233ef1e8023283fb8d77c8c548b13fe846849c90c0ca93831c616396bd473e9932b3ddd2986a9b5fb9480d8846b4ada73d88b2", 0x38, 0x2, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0xfffffe26) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) prctl$PR_GET_DUMPABLE(0x3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40051}, 0x4) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000002c0)) accept4$unix(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0) 15:24:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="ed8f0000", @ANYRES16=r2, @ANYBLOB="010629bd7000fcdb77ca3dd166bbcb34690a312be51400040001000000000000000000000000ffffff748cd3ec15234e"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x40a0) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000040)={0x14, 0xc, 0x1, 0x92f6479b27d9c477, 0x70bd25, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x0) 15:24:16 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001040)='/dev/rtc0\x00', 0x0, 0x0) mmap$perf(&(0x7f0000c8f000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a27000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) fchdir(r2) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000977000/0x400000)=nil) 15:24:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) fchdir(r3) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r4, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r5, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r3, 0x5473, &(0x7f0000000500)=0x1) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000002c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r9 = dup2(r8, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r10, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r11, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r12, &(0x7f0000000200)=""/250, 0x50c7e3e3) r13 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r13, 0x4, 0x6100) r14 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r13, 0x20000010000, 0x2) sendfile(r13, r14, 0x0, 0xfffffffffffffffc) sendfile(r13, r14, &(0x7f0000000040), 0x8000fffffffe) r15 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x27051c927cf98980, 0x4) r16 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r16, 0x4, 0x6100) r17 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r16, 0x20000010000, 0x2) sendfile(r16, r17, 0x0, 0xfffffffffffffffc) sendfile(r16, r17, &(0x7f0000000040), 0x8000fffffffe) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x80, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r15}, {0x8, 0x1, r16}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 15:24:16 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7001, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x21) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000240}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250100000008000100000000000c00050004000000000000000c00020000000000000000000c00080001800000000000000c00020002000000000000000c000200080000000000000008000100000000000c00080000800000000000000c000400ff01000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400001e", @ANYRES16=r4, @ANYBLOB="000328bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x4020044) [ 89.322622] audit: type=1400 audit(1569079456.072:18): avc: denied { create } for pid=3025 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 15:24:16 executing program 2: clone(0x247ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') exit(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x190) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x5c3c, 0x8, 0xa, 0x0, 0x0, [{r2, 0x0, 0x1}, {r3, 0x0, 0x7}, {r4}, {r0, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x1}, {r5, 0x0, 0x800}, {r0, 0x0, 0x2}, {r6, 0x0, 0xffffffff}, {r7, 0x0, 0x4633}]}) getdents64(r0, 0x0, 0x0) 15:24:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)='![+trusteduser\'\x00'}, 0x30) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') ioctl$TCGETS2(r0, 0x5407, 0x0) ioctl$KDENABIO(r0, 0x4b36) [ 89.379701] audit: type=1400 audit(1569079456.132:19): avc: denied { write } for pid=3025 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 89.591975] binder_alloc: binder_alloc_mmap_handler: 3028 20001000-20002000 already mapped failed -16 15:24:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 15:24:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) syncfs(r0) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x9, 0xfffffffffffff001}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x5, 0xc952]) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 15:24:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005002}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0xa, [@empty, @empty, @link_local, @broadcast, @dev={[], 0x21}, @random="4d8d25437d13", @remote, @dev={[], 0x14}, @link_local, @broadcast]}) r1 = socket$key(0xf, 0x3, 0x2) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r2, r3, 0x0) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) r5 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x6100) r6 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r5, 0x20000010000, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) ioctl$RTC_EPOCH_READ(r5, 0x8004700d, &(0x7f0000000200)) r7 = socket$key(0xf, 0x3, 0x2) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r8, r9, 0x0) r10 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$link(0x8, r4, r10) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1100, 0x0) write$selinux_user(r11, &(0x7f0000000080)={'system_u:object_r:systemd_passwd_agent_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x3e) 15:24:16 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001040)='/dev/rtc0\x00', 0x0, 0x0) mmap$perf(&(0x7f0000c8f000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a27000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) fchdir(r2) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000977000/0x400000)=nil) 15:24:16 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() r2 = socket$inet6(0xa, 0x4, 0x10000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) r3 = memfd_create(&(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000013) 15:24:16 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_int(r2, 0x29, 0x42, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7e, r3, 0x1, 0xb75f, 0x6, @local}, 0x14) r4 = socket$inet6(0xa, 0xa, 0x5) getsockopt$inet6_int(r4, 0x29, 0x42, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7e, r5, 0x1, 0xb75f, 0x6, @local}, 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) fchdir(r6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'nr0\x00', r1}) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r8, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r9, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r6, 0x5473, &(0x7f0000000500)=0x1) getpeername$packet(r6, &(0x7f00000027c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002800)=0x14) sendmmsg$inet(r0, &(0x7f0000002940), 0x2d1e7be817004f8, 0x4) 15:24:16 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000003c0)={'mangle\x00'}, &(0x7f0000000500)=0x54) close(r0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0xa8002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r3, &(0x7f0000005dc0)=[{{&(0x7f0000000580)=@nfc_llcp, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000640)=""/58, 0x3a}, {0x0}], 0x4}}, {{&(0x7f0000001cc0)=@caif=@dbg, 0x80, 0x0, 0x0, &(0x7f0000001e00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005bc0)=""/96, 0x60}, 0x1000}, {{&(0x7f0000005c40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}}], 0x4, 0x40000000, &(0x7f0000005ec0)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc000408}, 0xc, &(0x7f0000000540)={&(0x7f0000007340)=ANY=[@ANYRES16, @ANYBLOB="00042cbd7000fedbdf25020000006c00030008000800000000000800010000000000080001000200000014000200697036677265300000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) unlink(0x0) sendfile(r0, r4, 0x0, 0x8000fffffffe) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) fchdir(r7) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r8, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r9, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r7, 0x5473, &(0x7f0000000500)=0x1) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r10, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040081}, 0x8000) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:24:17 executing program 3: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00030000000100000067681bfd070000000000000000fb6c7a"}, 0x48) 15:24:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/[input\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000000c0)={0x1, 0x20, "59873c5e5d5215db763848b22e4e9c40795ae2b0dfdac69406838ba1f210760f"}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 15:24:17 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) fchdir(r0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r1, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r2, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r0, 0x5473, &(0x7f0000000500)=0x1) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) write$P9_RLERRORu(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1d99000000000000006367726f7570766d6e6574b12d47504c03000000"], 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x3b, 0x7c265728e0207441, 0x5, 0x1, 0x54, 0xfffffffffffffff0}, @map={0x18, 0x9, 0x1, 0x0, r0}, @exit], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0xfea7) 15:24:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x62, &(0x7f0000000ffc)=0x80000000, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001585dbf495d2555b65", @ANYRES32=r1, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRES64=r0, @ANYBLOB="bce89930494f748bfc4546f88c612d55b81aab07f44864ef4f0d266bd155d30f981827f1ded96fe330ccc0deea97b084119c6d71bb0efa556c37a701e6fd840b7d021e2397ef9beb0bfc134dcae5d7115ce0841f0845f8c9614f0ab9055c184040cc3e457b57343c85993432065302188694eb68f3872f1a2cc3d0e6e72ff7bd2311dc8dde79a3f1e8437aeac1043e1a76e48c40f149a42748b75cef71ae70423017082e7acfad0c253fcd432b74eec23dd552fd5c8521a1407fc2c055ad9553fff8f95b7ca55be198e7860488ca81bb9f0e7e5912202bae08ffc61d6b33aef916de18c0c99875263a7a32b27dc4d7076e83", @ANYBLOB="47482fcf5d8cad2420e6bbac4a6ff9ce96011b4be109e9ad2b6cef19a299bd1870129dedfdaf03fa02d2677c930d1dbbc42a1fabbc153df7e1b6627088d0faafaaba99972184f57341610ad80694a6864abb9a5c329176f67f734722e74f6caf7cdaf70a35ff2964d7ad2eb876c08a321cb5a1047e9ecb1c72e45e5c1ae9"], @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRES64=r5]]], 0x3}}, 0x0) 15:24:17 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x8) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xc867076f160aa902) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x279) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0xff31) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, 0x0}, 0x4000) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xa43) openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x20000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x129b07d7ea558da0}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="a226814fbed5673a505ed80ee82bae45268ed72e010c763d1a2cd26198a9633505c2ce8682b0f3e940c4005a51dd49ec793fbacbf7e877db9c32351d950f9026e94f465b7cef4862875255600458ab16b36a116be175fa711e4e7a5776af46cafcc133d06d1ebf5c5be502cbc50ccbbe096fe62affd96415798a"], 0x3}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) signalfd4(0xffffffffffffffff, &(0x7f0000000840)={0x6}, 0x8, 0x800) ioprio_get$uid(0x400000000003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) getpeername$packet(r1, 0x0, &(0x7f0000000340)=0xfffffcf6) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) 15:24:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001d40)=""/144, 0x90}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) fcntl$setown(r0, 0x8, r1) r2 = socket$inet(0x2, 0x80000, 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x283) syncfs(r3) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x400, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) clone(0x207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xa, 0xa, 0x180000000000b) r4 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x6, 0x105082) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r6 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x1) pwritev(r6, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xdf8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ppoll(0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0xcc) fcntl$setstatus(r4, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000540)="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", 0xa2) read(r7, &(0x7f0000000340)=""/250, 0x14df5a54151c3a26) sendfile(r5, r4, 0x0, 0x7ffff) [ 90.686689] audit: type=1400 audit(1569079457.442:20): avc: denied { ioctl } for pid=3127 comm="syz-executor.5" path="socket:[11213]" dev="sockfs" ino=11213 ioctlcmd=0x4c00 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:24:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0xc, 0x2, 0x7d, 0x20000000000001, 0x1, 0x0}, 0x3c) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1) 15:24:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='%\x00 \t'], 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15:24:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x4000, 0x7000000, 0x200000000000000, 0x0, 0x4d, 0x0, 0x20001}, [@ldst={0x7}]}, &(0x7f0000000000)='\x00\x00\x00j\xff\xff\x9b\xff\xff\xf1s\x94\x9f\xaa!\xccQ\xd7\xa9\xcc\r1\xc2\a\x8f\xf8Ov\xbd\xd2\xef\xb2\xad\x1bd/\x10\xfebn\xdc#\xee\xfcl3w\x9d\xc3\xc7\f:\x98R\x9b?\xcfDl\x93Krp\xa1Z\x11H_\x89C\xa3#N\x9dHM\x17\xa6^\x80\xed\xd2\x02=U`rw\xcbtTEP\xbd\xb4\xaf\x93\x97\xea@\xb1\xa4\xe4\xe7Y\xa1\xcf,', 0x5, 0x410, &(0x7f00000000c0)=""/195}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) fchdir(r0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000045dd000000000000000500"/85], 0x58) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7e, r4, 0x1, 0xb75f, 0x6, @local}, 0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="f231ebaf8920557a13f16e0677b80174", 0x1, 0x5, 0x800, 0x65582d0b4240d2e8, 0x9d, 0x100, r4}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r1, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r2, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 15:24:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x1) ftruncate(r1, 0x7fff) sendfile(r0, r1, 0x0, 0x10010000000002) 15:24:17 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$TIOCNOTTY(r0, 0x5422) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x1c}, [@ldst={0x3, 0x2, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x70) [ 91.006709] audit: type=1400 audit(1569079457.762:21): avc: denied { prog_run } for pid=3161 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:24:18 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000080), 0x4) fremovexattr(r1, &(0x7f00000000c0)=@known='tr4\nted.overlay.upper\x00') fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00') 15:24:18 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f03000000450001070000001419001a0004000200030000000000000000005d14a4e91ee438", 0x39}], 0x1) 15:24:18 executing program 3: r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001d40)='/selinu^/create\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0xffff, 0x4e44, 0x400, 0x20, 0x3ff}) lseek(r0, 0x0, 0x3) fallocate(r1, 0x12, 0x3, 0x3) 15:24:18 executing program 3: unshare(0x10000000) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security\t`elioux\x00', &(0x7f00000000c0)='system_u:object_r:setfiles_exec_t:s0\x00', 0xffffffdd, 0x2) 15:24:18 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fchdir(r1) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r2, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r3, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r1, 0x5473, &(0x7f0000000500)=0x1) keyctl$get_keyring_id(0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'memory'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2b, 'cpu'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2b, 'pids'}]}, 0x37) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r0, 0x0) 15:24:18 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b000007110600f30501000b000300020423ca0300cf", 0x13) 15:24:18 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0x1}, 0x0, &(0x7f0000000200)="db", 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)="25958955024cb379c482a233ccc325900fca52e2cad1d2e52ad4d4739437479cda8c13b4ce9ef1034d143a923cafc7a747759d1889e80de75b191aef7b1c9f580f556a09dd36919cc932dc098998e1dba6daa407e708660806972ca3b07e3281402c8445f9", 0x65}], 0x1}}], 0x1, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)=ANY=[], 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x0, 'io'}, {0xf8c821a38a491e9f, 'cpu'}, {0x2b, 'memory'}]}, 0x11) tkill(r2, 0x17) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2c, @remote, 0x4e21, 0x3, 'ovf\x00', 0x8, 0x4, 0x73}, 0x2c) [ 91.353898] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.364902] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 15:24:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x105900) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000180)={0x800, 0x3372, 0x7ff, 0x652, 0x2, 0x2}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='hwsim0\x00', 0x10) fcntl$setstatus(r1, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r4, 0x0, 0xfffffffffffffffc) sendfile(r1, r4, &(0x7f0000000040), 0x8000fffffffe) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) write(r5, &(0x7f0000000300)="42ee8cef89ad3b826ffe198b7d114e6dfc359ad445e8fcbef40df136456df65204c912235dd63f28cc19c337514e5d97f964633800ec462cff27e0ae3903ac0ae6eaad1b7f605991475c21330f1342c68dae784fbc70aa398e12eb29784db3413434014dbf6e70d75d2ba58e232a77a894c8cb8ca4446aec0c9880ed6f35653b73afcadd3ee4b17448b5e2f67d177c318bd2", 0x92) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2000, 0x0) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r7, &(0x7f0000000a80)) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='}\x00') r8 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r9, &(0x7f0000000a80)) ptrace$poke(0x5, r7, &(0x7f00000001c0), 0x10000004e47) 15:24:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) sync_file_range(r0, 0x1ff, 0x111b0bc5, 0xf) 15:24:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000000c0)=0x402, 0xfde4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x8, 0x8, 0x7, 0x6e6}, {0x3ff, 0x3, 0x1ff}, {0x200, 0x7, 0x3, 0x9}, {0xff, 0x5, 0x9, 0x1ff}, {0x7, 0x6, 0x1f, 0xfff}, {0x8, 0x0, 0x1, 0x2}, {0x400, 0x2, 0x5, 0x2}]}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 15:24:19 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x3}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) linkat(r0, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0/file0\x00', 0x1400) fchdir(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x40000000008004, 0x0) fchdir(r2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) r4 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="80380567d2f4d955275917e84d720eef3eb90f8a1b01433820805e966f35000000d428a4ce93f78879cdd3dd3ce9a75a54df427e000000000e417c2072482d081498cbcc839ea650db672a9492c2704fdbe48423566449564cb20ea349f09fa8df3b9a9330a14e646d5ac3ae17650bdabe937c232dca788c2ce6e60c8b59c81bcea5ac1cfcbc0711fdf897792bc3f006989c3672ea34a595c73b984c4e994582dbfe2104b968bc30825fe788c62f9f49e29c54dbdfedfc2f5196464f2a9b3a7290ce1530feff998444be543842a82580714a982243ce8662bf8b54efa846f79cc78163b1e5b9f9cf0e1dd529bb62ce3f1b1a22cce56312f070"], 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x3) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000340)=0xd4ab, 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r7, &(0x7f0000000a80)) lseek(r4, 0x20000010000, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) write(r1, &(0x7f00000000c0)="8aec592344b8776fcc12640aa7cd9a6107f8c1362aa042ade4d2f75310142645d5e57475f85fdd39978588cd373068", 0x2f) ftruncate(r6, 0x6) pipe(&(0x7f00000003c0)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) 15:24:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r0, &(0x7f0000002100)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/4096, 0xff5d) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x91) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000001140)={0x1000, 0x8}) setsockopt$inet_int(r3, 0x0, 0x40, &(0x7f0000000ffc), 0x4) write$binfmt_misc(r3, &(0x7f0000001080)={'syz0', "9c73f85f0a41b2e3ffbf21aae7c80b88c48b679d7bdf83ae4fc9a7c84556dc4b5b92420dc1e0bfb887fc7f2a0a127dd43aeb1fe1981eced5dcf268f77eb492fa2223b881cd67e0053b5e09e09613b23e6dc4f08cb993fc14ce7b61e001690d52d69d82f65504746e0436badeda583842d8c209574839ca7524497c991c11feb33c0e516b15c6254c2ab300aa115f5527"}, 0x94) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r4 = dup(r2) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000040)) 15:24:19 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x8f61883e99c655c1, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) dup2(r1, r0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000a80)) r5 = syz_open_procfs(r4, &(0x7f0000000080)='fdinfo\x00') sendfile(r0, r5, 0x0, 0x80000003) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000140)={0x30, 0x0, 0x5, [{0x3, 0x4, 0x8, 0x7, 'eth0user'}]}, 0x30) 15:24:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$UHID_INPUT2(r3, &(0x7f0000000040)={0xc, 0x53, "24c9a18a49721bde1a0402ce7947a46854a956a2ad2379841f5ac485882109a93bc9b27aef071bd22e3e215eed6d5274151cd96c5a55def5c7137bcf137aa05344c54dedd37853b8a35288d1258aa1934b610c"}, 0x59) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) write$P9_ROPEN(r2, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x100, 0x2, 0x4}, 0x2da}}, 0x18) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc)=0x5, 0x0) fstat(r1, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c05, 0x0) 15:24:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/54, 0x36}], 0x3) r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x7, 0xfff, 0xfffffffffffffcc1, 0x2, 0x4, 0x6, 0x7, 0x3ba, 0x7, 0x2, 0x1, 0x3}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fusectl\x00', 0x9442, 0x0) [ 92.552180] audit: type=1400 audit(1569079459.302:22): avc: denied { set_context_mgr } for pid=3217 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 92.586462] binder: 3217:3218 BC_REQUEST_DEATH_NOTIFICATION death notification already set 15:24:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/71) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @dev}}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x0, 0x1, 0x6, 0x0, 0x64f, 0x1, 0x3ff}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 15:24:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x13) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x20, @rand_addr="883cf0449f685837e49feb99a4f372de", 0x8aa0}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x8) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d40)=[{0x10, 0x29, 0x4, '2'}], 0x10}}], 0x2, 0x0) 15:24:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x1}, 0x14}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x9, 0x1, 0x7f, 0x80000000}) [ 92.604645] binder: 3217:3218 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 92.662862] audit: type=1400 audit(1569079459.412:23): avc: denied { ioctl } for pid=3246 comm="syz-executor.5" path="socket:[11809]" dev="sockfs" ino=11809 ioctlcmd=0x5820 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 15:24:21 executing program 3: mknod$loop(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r2 = eventfd2(0xfffffffffffffbec, 0x180001) fadvise64(r2, 0x0, 0x2, 0x0) sched_rr_get_interval(r1, &(0x7f0000000a80)) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="c10787018cb54e143645fe58014f516824980d2ed2384514d3f40c11bb3630a681f0bba312d7e2f7c5e5a26ae70a79a3570d0f6dd136565db340", 0x3a}) 15:24:21 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) ptrace(0x10, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fchdir(r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r3, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r4, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) ioctl$int_in(r2, 0x5473, &(0x7f0000000500)=0x1) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000100)="e90f6db447598c03e879b68d6aa08e584da42f62a6f9266f41609bad3b3eaaaf85830fc88a43258eca0500c61f1ff8e7e093548457ec9bf096b3d46dd19b6bf3963e62916a78208f399b6409df8dc3417b63ae5afc8fb2d137f2af8f391e4e28c92c00edf75307faa4a7082f27d66a5d6a43e1885778ed2a1eef28796e9a56eb2265dd248696463bb62d54d582e05e62776b1113aa0072d40ac3381af8c8ad18959680ca2d16c5640ecb5724d60802b4f16549ec2f0956825e0dc138a680f3dc0652ccae3f8d04456212c2b1e72c783f9031bc3003f9d05be19f31f0c08f46b59dc3b9f6c849c87e0c2a3e366be5433d493a59", 0xf3, 0xfffffffffffffffd, 0x0, 0x1, r2}, &(0x7f0000000040)) ptrace$cont(0x4205, r0, 0x2, 0x20107ff6) 15:24:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x802, 0x0) ppoll(&(0x7f00000019c0), 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fchdir(r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030ec3119303030302c757365725f69643da1bb262222d3b10edb2e26829fd0d40f9757dc81ff13ea3c33c84ee4785822653bf92bba9b696b373d54e37812a1f6bfb70200196be94683d2502a36e01bd2709b0934aa44bda38506a6ebfccff3369145e8098c5432a76ebe427241919a35d67ffb0eeae3da82edc58d76f6c715", @ANYRESDEC=r3, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea41d1db876bbdab5983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a2799652998551f56943a2b27176ad3946a59df608eb", @ANYRESDEC=r4, @ANYBLOB="2c6d61785f726561643d30783030303030308358c6ea349c772828b79f682686a8fc303030303030392cf9226661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303430302c626c6b73697a653d3078303030303030"]) ioctl$int_in(r2, 0x5473, &(0x7f0000000500)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2122}) preadv(r1, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) unshare(0x40000000) syz_open_dev$mice(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10003, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x12, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x28}}, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000100600000000000000010000000000001fadb0f9d833a5334c61968fa908162d02d4c758cf26f7b0b48445eeeaae14e7cf1aff9e3aa41c4eb7517fe09c22", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x3}}, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) pipe(&(0x7f0000000380)) 15:24:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$int_out(r3, 0x3, &(0x7f00000000c0)) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000001c0)=""/228) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)=0x2a8d389bbc21adcb) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r5, &(0x7f0000000a80)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x8, &(0x7f0000000440)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000140)=0x5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl(r6, 0x7fff, &(0x7f0000000300)="494219b72995090025cba234410c43b4c539725c096bc1e25f917dce7b0c75f01f5e62e091bdec2a86a6eb09560bcc4006491e66eb2229fd3c535065d665ecd920838c8b336fcbf5b27aff27d65f7e38e75a9afdae4de0540dc4df1f45a139ea3cb1c1870b10e141f76cf81490b27f53b4f1cbca04fdb03f128ad18084a9a86141443fb56ffd4300990132cc506bc5dd657eb9ba88156972d48bf78ecbfce9f185281104f8d2ea97c4eef96c0b2acab112a40ba6a1eb491e099421a540c21fe22274b88a84b99717acd0c582e714cd5a1edbc472f0b3f29147d2aa15beb771d8") fcntl$lock(r1, 0x6, &(0x7f0000000080)) truncate(&(0x7f0000000400)='./file0\x00', 0x4) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) r7 = dup3(r0, r1, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000100)) 15:24:21 executing program 4: clone(0x0, &(0x7f0000000080)="4a8c594cedaac8011e784c68fbb5d93b34f1b782df059266e5dc6588075dc0ede92aee453939466375e4d9e31791171834230774da63587d1e003d54aaa754706220e86d78873e86caab9bab527152c249f3f3d72226af90e73be0145cbc4eae28c709a3a87d2c099f5184ba786b86f4f6c8c4863fc585282b43c6e58d86d6220d26c8d8fb49652b679e05c0000000000000ba767f8656795b47f84be85ad80cea49365648fcf7900869674f3da97da65fa014ab8f6f1a1843df62ee8dbf17f49f090c9e14239f0f5420db882a4bb55876adb40f7e484d46aeea91b861aab3d783ed8e7e6919", 0x0, 0x0, 0x0) clone(0x8000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x1}, 0xf) syz_genetlink_get_family_id$team(0x0) waitid(0x0, 0x0, 0x0, 0x80000003, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x10000, 0x4, 0x3}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) 15:24:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x10000000000f0, &(0x7f0000000340)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x40, &(0x7f0000000ffc), 0x4) sendto(r4, &(0x7f0000000000)="e1b05aafe2b4b2b41adbdece4f5da6e8aeb63107dc852b3982c95f4975c0864ee72dda80d796aec0b31a7fef237c5f22adc32f0d40f33addb9f36aed22f287b60221718e8e", 0x45, 0x20004, 0x0, 0x0) dup2(r2, r1) 15:24:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x4fff}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141843, 0x4) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 15:24:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x6, 0x9, 0x128, 0x0, "00000000020d6bfded2342273716fbaa28f7be8377170ddf8cafc8b8503ab2cfd691ff3821"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0xa0}}, 0x0) 15:24:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x3, 0x84, 0x20000000000001, 0x0, 0x0}, 0x2c) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000380)=0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000003c0)="b2b62b16aeec36984651fb8c174969a25972abce98be6a5af3de92f658533c1fb7c71332eccb5f3ee642d322f7420b24d5b2e4e9b120d343e87573be918184b738753d76df674f6c62beb5be224d394098ad369300c9967a0177521c3d3e94f0bc30bd769c61b9b27c80", 0x0}, 0x18) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0xffffffffffffffcf) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000740)="35885d25e1cce893e6cb9d0fbba77b14c084ee943f819fabf76941d83fb65665945176e79760de024c2cd25ea9a45e0d8f1de745f639a7e22f2aea8ef6ac6e265d92b03bad8c7284ee32dbfee25ae56b2550f30ebd18cd13293cb4df599ddb402d38adaf841edc7f842b46bb97007f0cfcc13a213a9a25e5551e2e2dcbcc54461a55ff49018f0b8abf38f42a08637b95083146e6da6907b357292dc6174b1f9f8e", 0xa1, 0x4000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000900)) r3 = socket(0x10, 0x2, 0xc) write(r3, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000800010000000000000000", 0xfe32) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000980)) getpid() r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000440)='trusted.overlay.upper\x00', 0xffffffffffffffff}, 0x30) r6 = getpgid(r5) r7 = openat(r4, &(0x7f0000000100)='./bus\x00', 0x0, 0x200000003) fcntl$setown(r7, 0x8, r6) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000040)='userS\x00', 0xffffffffffffffff}, 0xfffffffffffffe7d) r10 = getpgid(r9) r11 = openat(r8, &(0x7f0000000180)='./bus\x00', 0x0, 0x200000003) fcntl$setown(r11, 0x8, r10) r12 = syz_open_procfs(r10, &(0x7f0000000940)='net/psched\x00') ioctl$TCGETS(r12, 0x5401, &(0x7f00000002c0)) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r13 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/access\x00', 0x2, 0x0) write(r13, &(0x7f0000000200)="fc7f4c4386880e05c2b962efbabece0b9af1812cb9c7c4c545f35908eb968a1b6ee12b26d888b91403a6bedccf28ccc36a5a071c8526633416fa89b69e94d6fee1018767d72c1728a895", 0x4a) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="3fc7b3a320000000"]) ioctl$TIOCGSERIAL(r12, 0x541e, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/63}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getpeername$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480)) lsetxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.upper\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="00fbdd0100a4fb3ef1424261baed92a173e279c85ebdbe7ef55c25fe0e43a3f682f210238bf826550b0e0c4d36b94ca3c8066af84b35a660ae88cb5aabea596080009e18512c8e505fb0cf2c58463f36c8d7987886528a74787f4e76cfe8f7088e5f0c061603cb7ab3265d6cd7a6b5ef94849bf65d03908ea319f88c67024e482acd885a09cfd2298da8db79da81bc0b6c3459575e672b2d19ca1fb2386043bea677a8ee6a7b43efe50b9ade0265c1b44a623888e89ebe15dbe355681ff2ddfbead32b3ba36f8fb610f1d65aa2fb697606a05f1e32b83f39a9acb79d31"], 0xdd, 0x2) clone(0x400, &(0x7f0000000040)="ce5ff903a9153b7afc47", 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003472dad619621b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ce1f472b91e417e11a4a296a500ee542ffd784c96f9c3a1bf539b22a05a98cab51f8ed0748bec8f261ef9f8c682d1c99cf34649d8f1f6a1106dab1fd25b5c823595ea35bc0342ef0c5f21980da33fb1f727ad053b0d633b4e360901791c28939346f86ca7ca48a52288f1369b59b108816a7ec9a10f97418521570fb56ef92edde19d3543d0c3255d51321f5bb3e862295a35e7e1b9035b15ab89a6a1a642a7553c94b74f042198cf6979d0152eba4c25b54efd36"], 0x820) getpid() shutdown(r2, 0x800000000000001) 15:24:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x40) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000080)) link(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 94.517266] audit: type=1400 audit(1569079461.272:24): avc: denied { map_create } for pid=3316 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:24:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x8dffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) [ 94.549029] audit: type=1400 audit(1569079461.302:25): avc: denied { map_read map_write } for pid=3316 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:24:21 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000002380)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da", 0x40) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x25) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0xcf, 0xfffffffffffffff9, 0x0, 0x2, 0x6, 0x7fffffff}) 15:24:21 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffff801, 0x400000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x8, 0x4) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x8000000000002bb, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x101000, 0xc0) setsockopt$inet6_int(r2, 0x29, 0x17, 0x0, 0xffffffffffffff18) r3 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = getpid() ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000000c0)='team_slave_0\x00') r7 = socket(0x10, 0x80002, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc)=0x2, 0xfffffffffffffe91) sendto(r7, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="00ae9106a5d32ad729487a940f2b4d8ccca862490ed9a7c5120d6f717f43d487378c0de98174c9cf7326ff3359af83fc864cb7a8437088292b8a7fbe9051e8c1f35645c51c7ac158830379f50528bf3d4a63c5d6a490ccd4689ac1787781a6cb82eb3275ce6f847786517d637953acefef30b7c2ac3ba63e09d8c28a9d91ff74d7ceb9ed63cf78ea63d7cff5a3b4faa76d43ffc3aac4e81ea000000821e30100"/176], 0xb0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000200)) sendfile(r3, r6, &(0x7f0000000140), 0x8fff) socket$inet6(0xa, 0x813, 0xfffffffffffffffc) [ 94.587642] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 94.638037] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 94.718014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=3338 comm=syz-executor.0 15:24:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) prctl$PR_GET_KEEPCAPS(0x7) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 15:24:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}, 0x1800}], 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48001, 0x265) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x40, &(0x7f0000000ffc), 0x4) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(r5, r6, r7) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) 15:24:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x40, &(0x7f0000000ffc), 0x4) sendfile(r1, r2, &(0x7f0000000040), 0x5) read(r0, &(0x7f0000000380)=""/245, 0x63) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000380)) 15:24:21 executing program 5: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/member\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000140), 0x8000fffffffe) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) r4 = accept4$inet6(r2, 0x0, &(0x7f00000000c0), 0x140800) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x8000, @ipv4={[], [], @multicast2}, 0x7}, 0x1c) dup2(r3, r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) recvmsg(r5, &(0x7f0000000800)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/165, 0xa5}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/95, 0x5f}], 0x8}, 0x40000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000580)={'nr\x0fjc\x00\xff\x03\x00\x00\x00 \x00', 0x10001}) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000700)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040801) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x11302000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15:24:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x0) 15:24:22 executing program 5: mknod(&(0x7f0000000080)='./file0\x00', 0x1039, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r1 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r1, 0x20000010000, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) tkill(r0, 0x1000000000016) [ 95.224218] audit: type=1400 audit(1569079461.982:26): avc: denied { call } for pid=3349 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 15:24:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x9, 0x100000001, 0x40, 0x80000001}, {0xfff, 0x4, 0x9, 0x8}, {0x1ff, 0x5, 0x1f, 0x3a537f24}, {0xf3b3, 0x9, 0x5, 0x6}]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x13, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_delete(r8) timer_gettime(r8, &(0x7f0000000300)) write(r7, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS3F(r9, 0x8018457f, &(0x7f0000000240)=""/95) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) poll(0x0, 0x0, 0x0) [ 95.325804] binder: 3349:3354 got transaction with invalid offset (0, min 0 max 0) or object. [ 95.335048] binder: 3349:3354 transaction failed 29201/-22, size 0-24 line 3199 [ 95.355076] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.362162] binder: 3349:3354 got transaction with invalid offset (0, min 0 max 0) or object. 15:24:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}, 0x1800}], 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48001, 0x265) r2 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) r3 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r2, 0x20000010000, 0x2) sendfile(r2, r3, 0x0, 0xfffffffffffffffc) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x40, &(0x7f0000000ffc), 0x4) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(r5, r6, r7) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) 15:24:22 executing program 3: pipe(&(0x7f0000000040)) r0 = socket(0x4d2047a3ffef6b87, 0x800, 0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000002, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) [ 95.372346] binder: 3349:3354 transaction failed 29201/-22, size 0-24 line 3199 [ 95.389119] binder: undelivered TRANSACTION_ERROR: 29201 15:24:22 executing program 2: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/210) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xfffffffffffffdf4) sendto(r1, &(0x7f0000001180)="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", 0x12a8, 0x8000, &(0x7f0000001100)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000440)={'\xf2yz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r3, r4, 0x0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\xcb\x00', r3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f00000002c0)=0x7, 0x4) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 15:24:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'nlmon0\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x8, 0x9, 0x3, 0x42, 0x4, 0x3c, 0x80, 0x6, 0x3, 0x8, 0x8, 0x1000, 0x7fffffff, 0x200, 0x9, [0x6, 0x8001]}}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4, 0x2000031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_flash={0x33, 0x0, "4d72d184b89b201a1598ebd7406aed3a4b80a03a83f06aac89368d3d3d5589ea93ed3f9cadf9db4e17d407e039b09de7733fbd79cde104fe6872b283e23e82b5db4536e7a9769b614d9d5a35b9dea07dedc23bfceaa48f8cf32a4cb8adaf39968e051eb0eaba8cc635ebea9ba67e35c316483b1ea1a92159657fde4558000fd0"}}) [ 95.437704] binder: 3384:3386 got transaction with invalid offset (0, min 0 max 0) or object. [ 95.507728] binder: 3384:3386 transaction failed 29201/-22, size 0-24 line 3199 [ 95.542351] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.570806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=3403 comm=syz-executor.0 15:24:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/19, 0x13) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mknodat(r2, &(0x7f0000000100)='./file0\x00', 0x40, 0x7) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffece, 0x20002002, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendfile(r0, r1, 0x0, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0x979cf437399e988, 0x0, 0x0, 0xffffff23) pipe(&(0x7f0000000100)={0xffffffffffffffff}) restart_syscall() read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@setneightbl={0xb0, 0x43, 0x306, 0x70bd26, 0x25dfdbfe, {0x2}, [@NDTA_THRESH3={0x8, 0x4, 0x5b}, @NDTA_NAME={0x3c, 0x1, 'mime_typevmnet1trusted]em1eth0!userproccpuset/cgroup^*.\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_THRESH1={0x8, 0x2, 0x5f0}, @NDTA_NAME={0x8, 0x1, '$\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x80000000}, @NDTA_PARMS={0x38, 0x6, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x1ffe000000}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x8}, @NDTPA_LOCKTIME={0xc, 0xf, 0x78e6f51f}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x5}, @NDTPA_APP_PROBES={0x8, 0x9, 0x401}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x92a) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r6+30000000}}, 0x0) tkill(r4, 0x20000000014) 15:24:23 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x20141042, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000ffffffff) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x8) read(r1, &(0x7f0000000000)=""/10, 0x76) 15:24:23 executing program 5: remap_file_pages(&(0x7f00003d5000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0x1d9d1adb4bdaad4, 0x0) r0 = memfd_create(&(0x7f0000000040)='u', 0x0) mlock2(&(0x7f00001f6000/0x2000)=nil, 0x2000, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) r1 = dup(r0) syz_open_dev$binder(0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f00000001c0), 0x0, 0x1000) ptrace$setopts(0xffffffffffffffff, 0x0, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) socket$nl_route(0x10, 0x3, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$packet(r3, 0x0, &(0x7f0000000480)) linkat(r2, &(0x7f0000000440)='./file0\x00', r3, &(0x7f00000006c0)='./file0/file0\x00', 0x0) fchdir(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu\x00-7\xdc\x1e\x12\x9dr\x01\x85~Q\xcf^O1\xce\x9c\xb0\x8a\xa0b\xc6\xea\xf38d\x1f\x8b\xed\xca\xf9\x15\xf4X&\b+S\xda\xcd\xf3\xd4\xe8r\x922\xf6\xd9\xc4Mt\x92\x88\x01\xab\x923K\xbd\xba-\xdc\xc8.\xf4\xab\x1f5\xb6\xcc\x8f=A\x03\x17\x94\x89\xec\x04', 0x200002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x303442, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000001c0)=0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x40, &(0x7f0000000ffc), 0x4) connect(r5, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) truncate(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r8, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r11, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r12, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r13, 0x0, 0x40, &(0x7f0000000ffc), 0x4) lsetxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000840)=ANY=[@ANYRES32=r5, @ANYRES16, @ANYRES32=r6, @ANYRES64=r7, @ANYRESHEX=r8, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16=r0], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="a66f0b7aaee69b7f5099032f33acc89c1ef305d14aeac7afda8cbe5829413b94daa2ba50fc27272dfbcc4a6fcf721afa0fb44765365104891d73f21fc558addbcf921fc306a642694d143f76a3393842080fdb917b53af998937f7d4c0b6633630a0e3eb292d4e032a8ffd9205417cdee6955cdf400e2a70a9d766de450ef3775ffbb70455fd6e219bc21220474c00b1a3712044faf5a9116d383dd23b7852ecfa2de024ca17eddeca74f89d2c4e01e15d27453fafebe6eba56407b8f672b117971b4ca48509000000000000000000", @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r13, @ANYRES64=0x0, @ANYRESOCT=r3, @ANYRESDEC=0x0], @ANYRESHEX=r11], 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 15:24:23 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000a40)='./bus\x00', 0xa) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0) lseek(r0, 0x20000010000, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x400) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r4 = epoll_create(0x2) write$cgroup_pid(r3, &(0x7f0000000340), 0x12) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) read(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)=0x2) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', 'cgroup2\x00'}, &(0x7f0000000240)=""/212, 0xd4) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) 15:24:23 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x9, 0x100000001, 0x40, 0x80000001}, {0xfff, 0x4, 0x9, 0x8}, {0x1ff, 0x5, 0x1f, 0x3a537f24}, {0xf3b3, 0x9, 0x5, 0x6}]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x13, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_delete(r8) timer_gettime(r8, &(0x7f0000000300)) write(r7, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS3F(r9, 0x8018457f, &(0x7f0000000240)=""/95) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(r5, &(0x7f00000017c0), 0x3a8, 0x7a) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) poll(0x0, 0x0, 0x0) 15:24:23 executing program 2: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/210) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xfffffffffffffdf4) sendto(r1, &(0x7f0000001180)="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", 0x12a8, 0x8000, &(0x7f0000001100)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000440)={'\xf2yz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r3, r4, 0x0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\xcb\x00', r3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f00000002c0)=0x7, 0x4) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 15:24:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80004002}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9da}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffd5}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x208b177d8b95facd}, 0xc080) [ 96.331022] mmap: syz-executor.5 (3416) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 15:24:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4, 0x2000031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_flash={0x33, 0x0, "4d72d184b89b201a1598ebd7406aed3a4b80a03a83f06aac89368d3d3d5589ea93ed3f9cadf9db4e17d407e039b09de7733fbd79cde104fe6872b283e23e82b5db4536e7a9769b614d9d5a35b9dea07dedc23bfceaa48f8cf32a4cb8adaf39968e051eb0eaba8cc635ebea9ba67e35c316483b1ea1a92159657fde4558000fd0"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) 15:24:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)=@nfc={0x27, 0x3}, 0x53, 0x0, 0xffffffffffffff8d}}, {{0x0, 0x0, 0x0, 0x9d6b, 0x0, 0xfffffffffffffe75}}], 0x80001cc, 0x10) socket$packet(0x11, 0x3, 0x300) 15:24:23 executing program 0: getgroups(0x2, &(0x7f0000000080)=[0xee01, 0xffffffffffffffff]) setfsgid(r0) socketpair(0x11, 0x5, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000000c0)=0x1e) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x2008000) 15:24:23 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x2) r1 = gettid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x40, &(0x7f0000000ffc), 0x4) preadv(r3, &(0x7f0000000500), 0x200000000000023d, 0x0) close(r2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) tkill(r1, 0x1000000000014) 15:24:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000032, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r2 = fcntl$dupfd(r0, 0xd582aeef8496f113, r1) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000000)='syz0\x00') 15:24:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) unshare(0x24020400) 15:24:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f00000001c0)) pkey_alloc(0x0, 0x1) [ 97.990581] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 97.990581] to free 51984kB on behalf of 'kswapd0' (33) because [ 97.990581] cache 65204kB is below limit 65536kB for oom_score_adj 12 [ 97.990581] Free memory is -13112kB above reserved [ 97.994735] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 97.994735] to free 51984kB on behalf of 'kworker/u4:1' (64) because [ 97.994735] cache 64704kB is below limit 65536kB for oom_score_adj 12 [ 97.994735] Free memory is -13060kB above reserved [ 98.274628] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 98.302599] CPU: 0 PID: 3437 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 98.309632] ffff8801cb1575c0 ffffffff81b42e79 ffff8801cb157980 ffffffff833e92b0 [ 98.317635] 00000000000003e8 ffff8801cb157998 0000000000000000 ffff8801cb157640 [ 98.325625] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 98.333633] Call Trace: [ 98.336197] [] dump_stack+0xc1/0x128 [ 98.341535] [] dump_header.isra.4+0x142/0x747 [ 98.347659] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 98.354560] [] ? ___ratelimit+0x53/0x401 [ 98.360242] [] oom_kill_process.cold.10+0xd/0xa6e [ 98.366710] [] ? has_capability_noaudit+0x24/0x30 [ 98.373185] [] ? check_preemption_disabled+0x3b/0x200 [ 98.380086] [] ? out_of_memory+0x6d4/0xe90 [ 98.385945] [] out_of_memory+0x292/0xe90 [ 98.391631] [] ? out_of_memory+0x410/0xe90 [ 98.397487] [] ? oom_killer_disable+0x200/0x200 [ 98.403788] [] ? trace_hardirqs_on+0xd/0x10 [ 98.409744] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 98.416560] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 98.423201] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 98.429496] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 98.436136] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 98.442690] [] ? retint_kernel+0x2d/0x2d [ 98.448376] [] __vmalloc_node_range+0x25b/0x600 [ 98.454672] [] ? xt_alloc_table_info+0xc9/0x100 [ 98.460966] [] vmalloc+0x5b/0x70 [ 98.465954] [] ? xt_alloc_table_info+0xc9/0x100 [ 98.472254] [] xt_alloc_table_info+0xc9/0x100 [ 98.478390] [] compat_do_replace.isra.10+0x116/0x380 [ 98.485219] [] ? translate_compat_table+0x1790/0x1790 [ 98.492058] [] ? mutex_lock_nested+0x6b7/0x900 [ 98.498277] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 98.505096] [] ? __cap_capable+0x168/0x1c0 [ 98.510957] [] ? ns_capable_common+0x12a/0x150 [ 98.517173] [] compat_do_ipt_set_ctl+0x102/0x140 [ 98.523594] [] compat_nf_setsockopt+0x8b/0x130 [ 98.529802] [] ? compat_do_replace.isra.10+0x380/0x380 [ 98.536723] [] compat_ip_setsockopt+0x97/0xd0 [ 98.542853] [] inet_csk_compat_setsockopt+0x97/0x120 [ 98.549585] [] ? ip_setsockopt+0xa0/0xa0 [ 98.555311] [] compat_tcp_setsockopt+0x3d/0x70 [ 98.561517] [] compat_sock_common_setsockopt+0xb4/0x150 [ 98.568504] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 98.575527] [] compat_SyS_setsockopt+0x169/0x550 [ 98.581909] [] ? sock_common_setsockopt+0xe0/0xe0 [ 98.588378] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 98.594935] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 98.601762] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 98.608584] [] ? do_fast_syscall_32+0xcf/0xa10 [ 98.614794] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 98.621348] [] do_fast_syscall_32+0x2f1/0xa10 [ 98.627497] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 98.634143] [] entry_SYSENTER_compat+0x90/0xa2 [ 98.646903] Mem-Info: [ 98.649364] active_anon:57709 inactive_anon:6602 isolated_anon:0 [ 98.649364] active_file:148 inactive_file:136 isolated_file:32 [ 98.649364] unevictable:2 dirty:9 writeback:4 unstable:0 [ 98.649364] slab_reclaimable:4130 slab_unreclaimable:63729 [ 98.649364] mapped:59011 shmem:8788 pagetables:1157 bounce:0 [ 98.649364] free:6052 free_pcp:30 free_cma:0 [ 98.705291] Node 0 active_anon:230836kB inactive_anon:26408kB active_file:368kB inactive_file:536kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:235944kB dirty:36kB writeback:16kB shmem:35152kB writeback_tmp:0kB unstable:0kB pages_scanned:9 all_unreclaimable? no [ 98.813372] DMA32 free:18680kB min:4696kB low:7712kB high:10728kB active_anon:40kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.943347] lowmem_reserve[]: 0 3505 3505 [ 98.948063] Normal free:5428kB min:5580kB low:9168kB high:12756kB active_anon:230796kB inactive_anon:26400kB active_file:4kB inactive_file:76kB unevictable:8kB writepending:52kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16520kB slab_unreclaimable:253184kB kernel_stack:4736kB pagetables:4628kB bounce:0kB free_pcp:180kB local_pcp:0kB free_cma:0kB [ 99.133347] lowmem_reserve[]: 0 0 0 [ 99.137540] DMA32: 6*4kB (M) 4*8kB (UM) 4*16kB (M) 2*32kB (UM) 3*64kB (UM) 3*128kB (UM) 4*256kB (UM) 1*512kB (M) 2*1024kB (M) 1*2048kB (M) 3*4096kB (M) [ 99.213521] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 99.213521] to free 51260kB on behalf of 'kworker/u4:1' (64) because [ 99.213521] cache 256kB is below limit 6144kB for oom_score_adj 0 [ 99.213521] Free memory is -13396kB above reserved [ 99.213534] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 99.213534] to free 51260kB on behalf of 'syz-executor.5' (3448) because [ 99.213534] cache 256kB is below limit 6144kB for oom_score_adj 0 [ 99.213534] Free memory is -13396kB above reserved [ 99.493387] = 18680kB [ 99.495849] Normal: 308*4kB (MH) 203*8kB (UMH) 60*16kB (UMH) 17*32kB (UMH) 7*64kB (UH) 5*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5448kB 8836 total pagecache pages [ 99.623346] 0 pages in swap cache [ 99.626811] Swap cache stats: add 0, delete 0, find 0/0 [ 99.632154] Free swap = 0kB [ 99.684703] Total swap = 0kB [ 99.687745] 1965979 pages RAM [ 99.690833] 0 pages HighMem/MovableOnly [ 99.753344] 313617 pages reserved [ 99.756803] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 99.813972] [ 470] 0 470 5384 180 16 3 0 -1000 udevd [ 99.822738] [ 581] 0 581 5383 181 14 3 0 -1000 udevd [ 99.903353] [ 582] 0 582 5381 181 14 3 0 -1000 udevd [ 99.912117] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 99.983361] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 99.992377] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 100.066634] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 100.133356] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 100.142036] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 100.223500] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 100.223500] to free 51260kB on behalf of 'syz-fuzzer' (2054) because [ 100.223500] cache 184kB is below limit 6144kB for oom_score_adj 0 [ 100.223500] Free memory is -13300kB above reserved [ 100.223509] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 100.223509] to free 51260kB on behalf of 'syz-executor.5' (3445) because [ 100.223509] cache 184kB is below limit 6144kB for oom_score_adj 0 [ 100.223509] Free memory is -13300kB above reserved [ 100.283355] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 100.283366] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 100.283377] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 100.283387] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 100.283397] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 100.283404] [ 2085] 0 2085 18048 14 22 2 0 0 syz-executor.3 [ 100.283412] [ 2086] 0 2086 18048 14 22 2 0 0 syz-executor.4 [ 100.283420] [ 2087] 0 2087 18048 14 22 2 0 0 syz-executor.1 [ 100.283430] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 100.283440] [ 2089] 0 2089 18048 8738 23 2 0 0 syz-executor.5 [ 100.283451] [ 2090] 0 2090 18048 8737 23 2 0 0 syz-executor.0 [ 100.283461] [ 2091] 0 2091 18048 8738 23 2 0 0 syz-executor.2 [ 100.283471] [ 2092] 0 2092 18048 8738 24 2 0 0 syz-executor.4 [ 100.283482] [ 2093] 0 2093 18048 8738 24 2 0 0 syz-executor.3 [ 100.283490] [ 2094] 0 2094 18048 8738 23 2 0 0 syz-executor.1 [ 100.283502] [ 2264] 0 2264 5383 181 14 3 0 -1000 udevd [ 100.283517] [ 2288] 0 2288 18114 8749 25 2 0 1000 syz-executor.3 [ 100.283527] [ 2306] 0 2306 5364 169 14 3 0 -1000 udevd [ 100.283537] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 100.283547] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 100.283558] [ 2665] 0 2665 18081 8748 25 2 0 1000 syz-executor.5 [ 100.283565] [ 2836] 0 2836 18147 8750 25 2 0 1000 syz-executor.1 [ 100.283573] [ 2881] 0 2881 18079 11617 31 2 0 1000 syz-executor.4 [ 100.283580] [ 2969] 0 2969 18147 8751 25 2 0 1000 syz-executor.2 [ 100.283588] [ 2979] 0 2979 18277 9612 28 2 0 1000 syz-executor.4 [ 100.283596] [ 3044] 0 3044 18147 8752 25 2 0 1000 syz-executor.2 [ 100.283603] [ 3085] 0 3085 3648 42 13 3 0 0 getty [ 100.283611] [ 3086] 0 3086 3648 43 13 3 0 0 getty [ 100.283618] [ 3094] 0 3094 3648 44 13 4 0 0 getty [ 100.283626] [ 3096] 0 3096 3648 42 13 3 0 0 getty [ 100.283633] [ 3099] 0 3099 3648 42 13 3 0 0 getty [ 100.283641] [ 3100] 0 3100 3648 44 13 3 0 0 getty [ 100.283648] [ 3133] 0 3133 18180 8755 25 2 0 1000 syz-executor.5 [ 100.283656] [ 3144] 0 3144 18180 8755 25 2 0 1000 syz-executor.5 [ 100.283663] [ 3168] 0 3168 18114 8753 32 2 0 1000 syz-executor.5 [ 100.283671] [ 3264] 0 3264 18147 8751 25 2 0 1000 syz-executor.1 [ 100.283679] [ 3277] 0 3277 18081 8715 25 2 0 1000 syz-executor.4 ** 12 printk messages dropped ** [ 100.373859] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 100.373861] Call Trace: [ 100.373877] [] dump_stack+0xc1/0x128 [ 100.373888] [] dump_header.isra.4+0x142/0x747 ** 98 printk messages dropped ** [ 100.374764] [ 3044] 0 3044 18147 8752 25 2 0 1000 syz-executor.2 ** 88 printk messages dropped ** [ 100.559251] [] ? out_of_memory+0x6d4/0xe90 [ 100.559257] [] out_of_memory+0x292/0xe90 [ 100.559264] [] ? out_of_memory+0x410/0xe90 [ 100.559271] [] ? oom_killer_disable+0x200/0x200 [ 100.559279] [] ? trace_hardirqs_on+0xd/0x10 [ 100.559286] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 100.559294] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 100.559301] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.559309] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 100.559316] [] ? check_preemption_disabled+0x3b/0x200 [ 100.559323] [] ? find_get_entry+0x11a/0x570 [ 100.559330] [] ? find_get_entry+0x141/0x570 [ 100.559336] [] ? page_cache_prev_hole+0x80/0x80 [ 100.559343] [] ? autoremove_wake_function+0x40/0x40 [ 100.559350] [] ? pagecache_get_page+0x131/0x710 [ 100.559357] [] filemap_fault+0xaf1/0x1110 [ 100.559365] [] ext4_filemap_fault+0x71/0xa0 [ 100.559372] [] __do_fault+0x223/0x500 [ 100.559378] [] ? do_page_mkwrite+0x3e0/0x3e0 [ 100.559386] [] ? generic_file_readonly_mmap+0x190/0x190 [ 100.559393] [] handle_mm_fault+0x1326/0x2350 [ 100.559399] [] ? vm_insert_page+0x6f0/0x6f0 [ 100.559406] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 100.559414] [] __do_page_fault+0x403/0xa60 [ 100.559422] [] ? bad_area_access_error+0x3a0/0x3a0 [ 100.559431] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 100.559438] [] do_page_fault+0x27/0x30 [ 100.559445] [] page_fault+0x25/0x30 [ 100.559449] Mem-Info: [ 100.559465] active_anon:59097 inactive_anon:3734 isolated_anon:0 [ 100.559465] active_file:27 inactive_file:24 isolated_file:0 [ 100.559465] unevictable:2 dirty:5 writeback:0 unstable:0 [ 100.559465] slab_reclaimable:4130 slab_unreclaimable:63419 [ 100.559465] mapped:55937 shmem:8588 pagetables:1126 bounce:0 [ 100.559465] free:370 free_pcp:0 free_cma:0 ** 128 printk messages dropped ** [ 100.631053] lowmem_reserve[]: 0 0 0 ** 169 printk messages dropped ** [ 100.776181] [ 3094] 0 3094 3648 43 13 4 0 0 getty ** 96 printk messages dropped ** [ 101.086504] [ 2047] 0 2047 17820 196 40 3 0 0 sshd ** 108 printk messages dropped ** [ 101.516722] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 101.516730] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 101.516737] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 101.516744] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 101.516752] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 101.516759] [ 2085] 0 2085 18048 14 22 2 0 0 syz-executor.3 [ 101.516766] [ 2086] 0 2086 18048 14 22 2 0 0 syz-executor.4 [ 101.516774] [ 2087] 0 2087 18048 14 22 2 0 0 syz-executor.1 [ 101.516781] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 101.516788] [ 2089] 0 2089 18048 8704 23 2 0 0 syz-executor.5 [ 101.516796] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 101.516803] [ 2091] 0 2091 18048 8731 23 2 0 0 syz-executor.2 [ 101.516810] [ 2092] 0 2092 18048 8731 24 2 0 0 syz-executor.4 [ 101.516818] [ 2093] 0 2093 18048 8731 24 2 0 0 syz-executor.3 [ 101.516825] [ 2094] 0 2094 18048 8731 23 2 0 0 syz-executor.1 [ 101.516833] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 101.516840] [ 2288] 0 2288 18114 8742 25 2 0 1000 syz-executor.3 [ 101.516848] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 101.516855] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 101.516862] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 101.516870] [ 2665] 0 2665 18081 8740 25 2 0 1000 syz-executor.5 [ 101.516877] [ 2836] 0 2836 18147 8743 25 2 0 1000 syz-executor.1 [ 101.516886] [ 2969] 0 2969 18147 8744 25 2 0 1000 syz-executor.2 [ 101.516894] [ 3044] 0 3044 18147 8745 25 2 0 1000 syz-executor.2 [ 101.516901] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 101.516909] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 101.516916] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 101.516923] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 101.516930] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 101.516937] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 101.516946] [ 3144] 0 3144 18180 8747 25 2 0 1000 syz-executor.5 [ 101.516954] [ 3264] 0 3264 18147 8744 25 2 0 1000 syz-executor.1 [ 101.516962] [ 3277] 0 3277 18081 8709 25 2 0 1000 syz-executor.4 [ 101.516969] [ 3287] 0 3287 18114 8711 25 2 0 1000 syz-executor.4 [ 101.516979] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 101.516989] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 101.516995] Out of memory: Kill process 3144 (syz-executor.5) score 1005 or sacrifice child [ 101.517027] Killed process 3144 (syz-executor.5) total-vm:72720kB, anon-rss:168kB, file-rss:34820kB, shmem-rss:0kB [ 101.603580] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 101.646786] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 101.646796] CPU: 1 PID: 3468 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 101.646814] ffff8801922ff5c0 ffffffff81b42e79 ffff8801922ff980 ffffffff833e92b0 [ 101.646825] 00000000000003e8 ffff8801922ff998 0000000000000000 ffff8801922ff640 [ 101.646835] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 101.646837] Call Trace: [ 101.646853] [] dump_stack+0xc1/0x128 [ 101.646864] [] dump_header.isra.4+0x142/0x747 [ 101.646874] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 101.646899] [] ? ___ratelimit+0x53/0x401 [ 101.646908] [] oom_kill_process.cold.10+0xd/0xa6e [ 101.646915] [] ? _raw_spin_unlock+0x2c/0x50 [ 101.646925] [] ? check_preemption_disabled+0x3b/0x200 [ 101.646934] [] ? out_of_memory+0x6d4/0xe90 [ 101.646942] [] out_of_memory+0x292/0xe90 [ 101.646950] [] ? out_of_memory+0x410/0xe90 [ 101.646958] [] ? oom_killer_disable+0x200/0x200 [ 101.646967] [] ? trace_hardirqs_on+0xd/0x10 [ 101.646976] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 101.646985] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 101.646992] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 101.647001] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 101.647012] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.647020] [] ? retint_kernel+0x2d/0x2d [ 101.647030] [] __vmalloc_node_range+0x25b/0x600 [ 101.647039] [] ? xt_alloc_table_info+0xc9/0x100 [ 101.647046] [] vmalloc+0x5b/0x70 [ 101.647053] [] ? xt_alloc_table_info+0xc9/0x100 [ 101.647060] [] xt_alloc_table_info+0xc9/0x100 [ 101.647070] [] compat_do_replace.isra.10+0x116/0x380 [ 101.647077] [] ? translate_compat_table+0x1790/0x1790 [ 101.647086] [] ? mutex_lock_nested+0x6b7/0x900 [ 101.647092] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 101.647102] [] ? __cap_capable+0x168/0x1c0 [ 101.647112] [] ? ns_capable_common+0x12a/0x150 [ 101.647121] [] compat_do_ipt_set_ctl+0x102/0x140 [ 101.647131] [] compat_nf_setsockopt+0x8b/0x130 [ 101.647140] [] ? compat_do_replace.isra.10+0x380/0x380 [ 101.647149] [] compat_ip_setsockopt+0x97/0xd0 [ 101.647159] [] inet_csk_compat_setsockopt+0x97/0x120 [ 101.647167] [] ? ip_setsockopt+0xa0/0xa0 [ 101.647174] [] compat_tcp_setsockopt+0x3d/0x70 [ 101.647184] [] compat_sock_common_setsockopt+0xb4/0x150 [ 101.647192] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 101.647202] [] compat_SyS_setsockopt+0x169/0x550 [ 101.647210] [] ? sock_common_setsockopt+0xe0/0xe0 [ 101.647219] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 101.647229] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 101.647238] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 101.647245] [] ? do_fast_syscall_32+0xcf/0xa10 [ 101.647254] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 101.647261] [] do_fast_syscall_32+0x2f1/0xa10 [ 101.647270] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 101.647279] [] entry_SYSENTER_compat+0x90/0xa2 [ 101.647282] Mem-Info: [ 101.647301] active_anon:54218 inactive_anon:2912 isolated_anon:0 [ 101.647301] active_file:0 inactive_file:41 isolated_file:0 [ 101.647301] unevictable:2 dirty:0 writeback:0 unstable:0 [ 101.647301] slab_reclaimable:4134 slab_unreclaimable:63437 [ 101.647301] mapped:55103 shmem:3047 pagetables:969 bounce:0 [ 101.647301] free:1418 free_pcp:68 free_cma:0 [ 101.647316] Node 0 active_anon:216872kB inactive_anon:11648kB active_file:0kB inactive_file:164kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:220412kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 101.647335] DMA32 free:124kB min:4696kB low:7712kB high:10728kB active_anon:40kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 101.647363] Normal free:5548kB min:5580kB low:9168kB high:12756kB active_anon:216832kB inactive_anon:11640kB active_file:0kB inactive_file:164kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16536kB slab_unreclaimable:253204kB kernel_stack:4544kB pagetables:3876kB bounce:0kB free_pcp:272kB local_pcp:240kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 101.647411] DMA32: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 124kB Normal: 119*4kB (UMH) 175*8kB (UMH) 176*16kB (UMH) 26*32kB (UMH) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5588kB 3124 total pagecache pages [ 101.647456] 0 pages in swap cache [ 101.647460] Swap cache stats: add 0, delete 0, find 0/0 [ 101.647462] Free swap = 0kB [ 101.647464] Total swap = 0kB [ 101.647467] 1965979 pages RAM [ 101.647469] 0 pages HighMem/MovableOnly [ 101.647471] 313617 pages reserved [ 101.647476] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 101.647494] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 101.647505] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 101.647516] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 101.647524] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 101.647532] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 101.647539] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 101.647547] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 101.647555] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 101.647563] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 101.647571] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 101.647578] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 101.647586] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 101.647594] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 101.647602] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 101.647610] [ 2085] 0 2085 18048 14 22 2 0 0 syz-executor.3 [ 101.647617] [ 2086] 0 2086 18048 14 22 2 0 0 syz-executor.4 [ 101.647625] [ 2087] 0 2087 18048 14 22 2 0 0 syz-executor.1 [ 101.647632] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 101.647640] [ 2089] 0 2089 18048 8704 23 2 0 0 syz-executor.5 [ 101.647648] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 101.647656] [ 2091] 0 2091 18048 8731 23 2 0 0 syz-executor.2 [ 101.647664] [ 2092] 0 2092 18048 8731 24 2 0 0 syz-executor.4 [ 101.647672] [ 2093] 0 2093 18048 8731 24 2 0 0 syz-executor.3 [ 101.647680] [ 2094] 0 2094 18048 8731 23 2 0 0 syz-executor.1 [ 101.647688] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 101.647696] [ 2288] 0 2288 18114 8742 25 2 0 1000 syz-executor.3 [ 101.647704] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 101.647712] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 101.647720] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 101.647728] [ 2665] 0 2665 18081 8740 25 2 0 1000 syz-executor.5 [ 101.647736] [ 2836] 0 2836 18147 8743 25 2 0 1000 syz-executor.1 [ 101.647745] [ 2969] 0 2969 18147 8744 25 2 0 1000 syz-executor.2 [ 101.647754] [ 3044] 0 3044 18147 8745 25 2 0 1000 syz-executor.2 [ 101.647762] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 101.647769] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 101.647777] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 101.647784] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 101.647793] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 101.647800] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 101.647810] [ 3264] 0 3264 18147 8744 25 2 0 1000 syz-executor.1 [ 101.647818] [ 3277] 0 3277 18081 8709 25 2 0 1000 syz-executor.4 [ 101.647826] [ 3287] 0 3287 18114 8711 25 2 0 1000 syz-executor.4 [ 101.647836] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 101.647862] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 101.647868] Out of memory: Kill process 3044 (syz-executor.2) score 1005 or sacrifice child [ 101.647913] Killed process 3044 (syz-executor.2) total-vm:72588kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 101.787004] udevd invoked oom-killer: gfp_mask=0x24201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=0, order=0, oom_score_adj=-1000 [ 101.787014] CPU: 1 PID: 2264 Comm: udevd Not tainted 4.9.141+ #23 [ 101.787029] ffff8801aa4676f8 ffffffff81b42e79 ffff8801aa467ab8 ffffffff833e92b0 [ 101.787039] 00000000fffffc18 ffff8801aa467ad0 0000000000000000 ffff8801aa467778 [ 101.787048] ffffffff814fb526 0000000000000000 00000000fffffc18 ffffffff82816fa5 [ 101.787050] Call Trace: [ 101.787066] [] dump_stack+0xc1/0x128 [ 101.787075] [] dump_header.isra.4+0x142/0x747 [ 101.787084] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 101.787092] [] ? ___ratelimit+0x53/0x401 [ 101.787100] [] oom_kill_process.cold.10+0xd/0xa6e [ 101.787107] [] ? _raw_spin_unlock+0x2c/0x50 [ 101.787115] [] ? check_preemption_disabled+0x3b/0x200 [ 101.787124] [] ? out_of_memory+0x6d4/0xe90 [ 101.787131] [] out_of_memory+0x292/0xe90 [ 101.787138] [] ? out_of_memory+0x410/0xe90 [ 101.787146] [] ? oom_killer_disable+0x200/0x200 [ 101.787154] [] ? trace_hardirqs_on+0xd/0x10 [ 101.787162] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 101.787170] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 101.787178] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.787187] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 101.787195] [] ? radix_tree_lookup_slot+0x85/0xc0 [ 101.787202] [] ? find_get_entry+0x11a/0x570 [ 101.787209] [] ? find_get_entry+0x141/0x570 [ 101.787216] [] ? page_cache_prev_hole+0x80/0x80 [ 101.787225] [] ? autoremove_wake_function+0x40/0x40 [ 101.787232] [] ? pagecache_get_page+0x131/0x710 [ 101.787240] [] filemap_fault+0xaf1/0x1110 [ 101.787249] [] ext4_filemap_fault+0x71/0xa0 [ 101.787256] [] __do_fault+0x223/0x500 [ 101.787263] [] ? do_page_mkwrite+0x3e0/0x3e0 [ 101.787270] [] ? handle_mm_fault+0x1d4f/0x2350 [ 101.787278] [] handle_mm_fault+0x1326/0x2350 [ 101.787286] [] ? ep_poll+0x18f/0xb20 [ 101.787293] [] ? vm_insert_page+0x6f0/0x6f0 [ 101.787301] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 101.787311] [] __do_page_fault+0x403/0xa60 [ 101.787319] [] ? __fget_light+0x169/0x1f0 [ 101.787326] [] ? bad_area_access_error+0x3a0/0x3a0 [ 101.787336] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 101.787343] [] do_page_fault+0x27/0x30 [ 101.787351] [] page_fault+0x25/0x30 [ 101.787355] Mem-Info: [ 101.787371] active_anon:54193 inactive_anon:2912 isolated_anon:0 [ 101.787371] active_file:0 inactive_file:41 isolated_file:0 [ 101.787371] unevictable:2 dirty:0 writeback:0 unstable:0 [ 101.787371] slab_reclaimable:4134 slab_unreclaimable:63437 [ 101.787371] mapped:55103 shmem:3047 pagetables:969 bounce:0 [ 101.787371] free:1399 free_pcp:30 free_cma:0 [ 101.787385] Node 0 active_anon:216772kB inactive_anon:11648kB active_file:0kB inactive_file:164kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:220412kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 101.787403] DMA32 free:124kB min:4696kB low:7712kB high:10728kB active_anon:40kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 101.787430] Normal free:5472kB min:5580kB low:9168kB high:12756kB active_anon:216732kB inactive_anon:11640kB active_file:0kB inactive_file:164kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16536kB slab_unreclaimable:253204kB kernel_stack:4512kB pagetables:3876kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 101.787478] DMA32: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 124kB Normal: 162*4kB (UMH) 176*8kB (MH) 157*16kB (UMH) 27*32kB (UMH) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5496kB 3124 total pagecache pages [ 101.787522] 0 pages in swap cache [ 101.787526] Swap cache stats: add 0, delete 0, find 0/0 [ 101.787528] Free swap = 0kB [ 101.787530] Total swap = 0kB [ 101.787532] 1965979 pages RAM [ 101.787534] 0 pages HighMem/MovableOnly [ 101.787537] 313617 pages reserved [ 101.787539] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 101.787555] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 101.787566] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 101.787576] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 101.787586] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 101.787597] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 101.787606] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 101.787613] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 101.787621] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 101.787629] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 101.787636] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 101.787643] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 101.787651] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 101.787658] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 101.787665] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 101.787673] [ 2085] 0 2085 18048 14 22 2 0 0 syz-executor.3 [ 101.787680] [ 2086] 0 2086 18048 14 22 2 0 0 syz-executor.4 [ 101.787687] [ 2087] 0 2087 18048 14 22 2 0 0 syz-executor.1 [ 101.787695] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 101.787702] [ 2089] 0 2089 18048 8704 23 2 0 0 syz-executor.5 [ 101.787710] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 101.787717] [ 2091] 0 2091 18048 8731 23 2 0 0 syz-executor.2 [ 101.787725] [ 2092] 0 2092 18048 8731 24 2 0 0 syz-executor.4 [ 101.787732] [ 2093] 0 2093 18048 8731 24 2 0 0 syz-executor.3 [ 101.787739] [ 2094] 0 2094 18048 8731 23 2 0 0 syz-executor.1 [ 101.787747] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 101.787755] [ 2288] 0 2288 18114 8742 25 2 0 1000 syz-executor.3 [ 101.787762] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 101.787770] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 101.787777] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 101.787785] [ 2665] 0 2665 18081 8740 25 2 0 1000 syz-executor.5 [ 101.787792] [ 2836] 0 2836 18147 8743 25 2 0 1000 syz-executor.1 [ 101.787801] [ 2969] 0 2969 18147 8744 25 2 0 1000 syz-executor.2 [ 101.787810] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 101.787817] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 101.787824] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 101.787831] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 101.787842] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 101.787852] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 101.787864] [ 3264] 0 3264 18147 8744 25 2 0 1000 syz-executor.1 [ 101.787874] [ 3277] 0 3277 18081 8709 25 2 0 1000 syz-executor.4 [ 101.787885] [ 3287] 0 3287 18114 8711 25 2 0 1000 syz-executor.4 [ 101.787898] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 101.787908] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 101.787914] Out of memory: Kill process 2969 (syz-executor.2) score 1005 or sacrifice child [ 101.787945] Killed process 2969 (syz-executor.2) total-vm:72588kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 102.243362] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 102.243484] lowmemorykiller: Killing 'syz-executor.1' (3264) (tgid 3264), adj 1000, [ 102.243484] to free 34976kB on behalf of 'udevd' (2306) because [ 102.243484] cache 248kB is below limit 6144kB for oom_score_adj 0 [ 102.243484] Free memory is -31900kB above reserved [ 102.330284] rsyslogd invoked oom-killer: gfp_mask=0x24201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=0, order=0, oom_score_adj=0 [ 102.330294] CPU: 0 PID: 1892 Comm: rsyslogd Not tainted 4.9.141+ #23 [ 102.330310] ffff8801d67276f8 ffffffff81b42e79 ffff8801d6727ab8 ffffffff833e92b0 [ 102.330320] 0000000000000000 ffff8801d6727ad0 0000000000000000 ffff8801d6727778 [ 102.330330] ffffffff814fb526 0000000000000000 0000000000000000 ffffffff82816fa5 [ 102.330332] Call Trace: [ 102.330347] [] dump_stack+0xc1/0x128 [ 102.330356] [] dump_header.isra.4+0x142/0x747 [ 102.330365] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 102.330373] [] ? ___ratelimit+0x53/0x401 [ 102.330381] [] oom_kill_process.cold.10+0xd/0xa6e [ 102.330388] [] ? _raw_spin_unlock+0x2c/0x50 [ 102.330396] [] ? check_preemption_disabled+0x3b/0x200 [ 102.330404] [] ? out_of_memory+0x6d4/0xe90 [ 102.330412] [] out_of_memory+0x292/0xe90 [ 102.330419] [] ? out_of_memory+0x410/0xe90 [ 102.330427] [] ? oom_killer_disable+0x200/0x200 [ 102.330435] [] ? trace_hardirqs_on+0xd/0x10 [ 102.330443] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 102.330451] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 102.330459] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 102.330468] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 102.330475] [] ? radix_tree_lookup_slot+0x85/0xc0 [ 102.330483] [] ? find_get_entry+0x11a/0x570 [ 102.330490] [] ? find_get_entry+0x141/0x570 [ 102.330497] [] ? page_cache_prev_hole+0x80/0x80 [ 102.330505] [] ? autoremove_wake_function+0x40/0x40 [ 102.330512] [] ? pagecache_get_page+0x131/0x710 [ 102.330520] [] filemap_fault+0xaf1/0x1110 [ 102.330528] [] ext4_filemap_fault+0x71/0xa0 [ 102.330536] [] __do_fault+0x223/0x500 [ 102.330542] [] ? do_page_mkwrite+0x3e0/0x3e0 [ 102.330550] [] ? generic_file_readonly_mmap+0x190/0x190 [ 102.330558] [] handle_mm_fault+0x1326/0x2350 [ 102.330565] [] ? vm_insert_page+0x6f0/0x6f0 [ 102.330572] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 102.330581] [] __do_page_fault+0x403/0xa60 [ 102.330589] [] ? bad_area_access_error+0x3a0/0x3a0 [ 102.330598] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 102.330605] [] do_page_fault+0x27/0x30 [ 102.330613] [] page_fault+0x25/0x30 [ 102.330616] Mem-Info: [ 102.330633] active_anon:54115 inactive_anon:2912 isolated_anon:0 [ 102.330633] active_file:15 inactive_file:15 isolated_file:0 [ 102.330633] unevictable:2 dirty:0 writeback:0 unstable:0 [ 102.330633] slab_reclaimable:4138 slab_unreclaimable:63447 [ 102.330633] mapped:55103 shmem:3047 pagetables:906 bounce:0 [ 102.330633] free:1422 free_pcp:88 free_cma:0 [ 102.330647] Node 0 active_anon:216460kB inactive_anon:11648kB active_file:60kB inactive_file:60kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:220412kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 102.330664] DMA32 free:124kB min:4696kB low:7712kB high:10728kB active_anon:40kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 102.330691] Normal free:5564kB min:5580kB low:9168kB high:12756kB active_anon:216420kB inactive_anon:11640kB active_file:60kB inactive_file:60kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16552kB slab_unreclaimable:253244kB kernel_stack:4448kB pagetables:3624kB bounce:0kB free_pcp:352kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 102.330740] DMA32: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 124kB Normal: 185*4kB (MH) 175*8kB (MH) 156*16kB (UMH) 25*32kB (UMH) 2*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5564kB 3077 total pagecache pages [ 102.330784] 0 pages in swap cache [ 102.330788] Swap cache stats: add 0, delete 0, find 0/0 [ 102.330790] Free swap = 0kB [ 102.330792] Total swap = 0kB [ 102.330794] 1965979 pages RAM [ 102.330797] 0 pages HighMem/MovableOnly [ 102.330799] 313617 pages reserved [ 102.330801] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 102.330816] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 102.330827] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 102.330837] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 102.330847] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 102.330858] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 102.330866] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 102.330873] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 102.330881] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 102.330888] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 102.330896] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 102.330903] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 102.330910] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 102.330922] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 102.330929] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 102.330937] [ 2085] 0 2085 18048 14 22 2 0 0 syz-executor.3 [ 102.330944] [ 2086] 0 2086 18048 14 22 2 0 0 syz-executor.4 [ 102.330952] [ 2087] 0 2087 18048 14 22 2 0 0 syz-executor.1 [ 102.330959] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 102.330967] [ 2089] 0 2089 18048 8704 23 2 0 0 syz-executor.5 [ 102.330974] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 102.330982] [ 2091] 0 2091 18048 8731 23 2 0 0 syz-executor.2 [ 102.330989] [ 2092] 0 2092 18048 8731 24 2 0 0 syz-executor.4 [ 102.330996] [ 2093] 0 2093 18048 8731 24 2 0 0 syz-executor.3 [ 102.331004] [ 2094] 0 2094 18048 8731 23 2 0 0 syz-executor.1 [ 102.331012] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 102.331019] [ 2288] 0 2288 18114 8742 25 2 0 1000 syz-executor.3 [ 102.331027] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 102.331035] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 102.331042] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 102.331049] [ 2665] 0 2665 18081 8740 25 2 0 1000 syz-executor.5 [ 102.331057] [ 2836] 0 2836 18147 8743 25 2 0 1000 syz-executor.1 [ 102.331068] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 102.331075] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 102.331082] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 102.331090] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 102.331097] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 102.331104] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 102.331115] [ 3277] 0 3277 18081 8709 25 2 0 1000 syz-executor.4 [ 102.331122] [ 3287] 0 3287 18114 8711 25 2 0 1000 syz-executor.4 [ 102.331132] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 102.331143] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 102.331148] Out of memory: Kill process 2836 (syz-executor.1) score 1005 or sacrifice child [ 102.331175] Killed process 2836 (syz-executor.1) total-vm:72588kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 102.568915] Out of memory: Kill process 2288 (syz-executor.3) score 1005 or sacrifice child [ 102.568953] Killed process 2288 (syz-executor.3) total-vm:72456kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 102.648516] Out of memory: Kill process 2665 (syz-executor.5) score 1005 or sacrifice child [ 102.648552] Killed process 2665 (syz-executor.5) total-vm:72324kB, anon-rss:140kB, file-rss:34820kB, shmem-rss:0kB [ 102.781038] Out of memory: Kill process 3287 (syz-executor.4) score 1005 or sacrifice child [ 102.781074] Killed process 3287 (syz-executor.4) total-vm:72456kB, anon-rss:156kB, file-rss:34688kB, shmem-rss:0kB [ 102.897920] Out of memory: Kill process 3277 (syz-executor.4) score 1005 or sacrifice child [ 102.897951] Killed process 3277 (syz-executor.4) total-vm:72324kB, anon-rss:148kB, file-rss:34688kB, shmem-rss:0kB [ 103.080871] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 103.080916] Killed process 2085 (syz-executor.3) total-vm:72192kB, anon-rss:56kB, file-rss:0kB, shmem-rss:0kB [ 103.234724] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 103.234768] Killed process 2087 (syz-executor.1) total-vm:72192kB, anon-rss:56kB, file-rss:0kB, shmem-rss:0kB [ 103.253523] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 103.253523] to free 11508kB on behalf of 'syz-fuzzer' (2049) because [ 103.253523] cache 156kB is below limit 6144kB for oom_score_adj 0 [ 103.253523] Free memory is -31812kB above reserved [ 103.253535] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 103.253535] to free 11508kB on behalf of 'getty' (3085) because [ 103.253535] cache 156kB is below limit 6144kB for oom_score_adj 0 [ 103.253535] Free memory is -31812kB above reserved [ 103.321683] oom_kill_process: 6 callbacks suppressed [ 103.321696] udevd invoked oom-killer: gfp_mask=0x24201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=0, order=0, oom_score_adj=-1000 [ 103.321705] CPU: 1 PID: 2264 Comm: udevd Not tainted 4.9.141+ #23 [ 103.321720] ffff8801aa4676f8 ffffffff81b42e79 ffff8801aa467ab8 ffffffff833e92b0 [ 103.321735] 00000000fffffc18 ffff8801aa467ad0 0000000000000000 ffff8801aa467778 [ 103.321745] ffffffff814fb526 0000000000000000 00000000fffffc18 ffffffff82816fa5 [ 103.321746] Call Trace: [ 103.321761] [] dump_stack+0xc1/0x128 [ 103.321771] [] dump_header.isra.4+0x142/0x747 [ 103.321779] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 103.321786] [] ? ___ratelimit+0x53/0x401 [ 103.321794] [] oom_kill_process.cold.10+0xd/0xa6e [ 103.321801] [] ? _raw_spin_unlock+0x2c/0x50 [ 103.321809] [] ? check_preemption_disabled+0x3b/0x200 [ 103.321817] [] ? out_of_memory+0x6d4/0xe90 [ 103.321824] [] out_of_memory+0x292/0xe90 [ 103.321830] [] ? out_of_memory+0x410/0xe90 [ 103.321838] [] ? oom_killer_disable+0x200/0x200 [ 103.321846] [] ? trace_hardirqs_on+0xd/0x10 [ 103.321854] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 103.321861] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 103.321869] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 103.321877] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 103.321884] [] ? radix_tree_lookup_slot+0x85/0xc0 [ 103.321891] [] ? find_get_entry+0x11a/0x570 [ 103.321898] [] ? find_get_entry+0x141/0x570 [ 103.321904] [] ? page_cache_prev_hole+0x80/0x80 [ 103.321912] [] ? autoremove_wake_function+0x40/0x40 [ 103.321918] [] ? pagecache_get_page+0x131/0x710 [ 103.321925] [] filemap_fault+0xaf1/0x1110 [ 103.321934] [] ext4_filemap_fault+0x71/0xa0 [ 103.321940] [] __do_fault+0x223/0x500 [ 103.321947] [] ? do_page_mkwrite+0x3e0/0x3e0 [ 103.321954] [] ? handle_mm_fault+0x1d4f/0x2350 [ 103.321960] [] handle_mm_fault+0x1326/0x2350 [ 103.321968] [] ? ep_poll+0x18f/0xb20 [ 103.321975] [] ? vm_insert_page+0x6f0/0x6f0 [ 103.321982] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 103.321990] [] __do_page_fault+0x403/0xa60 [ 103.321998] [] ? __fget_light+0x169/0x1f0 [ 103.322005] [] ? bad_area_access_error+0x3a0/0x3a0 [ 103.322014] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 103.322021] [] do_page_fault+0x27/0x30 [ 103.322029] [] page_fault+0x25/0x30 [ 103.322032] Mem-Info: [ 103.322048] active_anon:53915 inactive_anon:2912 isolated_anon:0 [ 103.322048] active_file:1 inactive_file:16 isolated_file:0 [ 103.322048] unevictable:2 dirty:0 writeback:0 unstable:0 [ 103.322048] slab_reclaimable:4138 slab_unreclaimable:63111 [ 103.322048] mapped:37703 shmem:3047 pagetables:684 bounce:0 [ 103.322048] free:1414 free_pcp:0 free_cma:0 [ 103.322062] Node 0 active_anon:215660kB inactive_anon:11648kB active_file:4kB inactive_file:64kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:150812kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 103.322078] DMA32 free:124kB min:4696kB low:7712kB high:10728kB active_anon:40kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 103.322102] Normal free:5532kB min:5580kB low:9168kB high:12756kB active_anon:215620kB inactive_anon:11640kB active_file:4kB inactive_file:64kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16552kB slab_unreclaimable:251900kB kernel_stack:4224kB pagetables:2736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 103.322147] DMA32: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 124kB Normal: 245*4kB (UMH) 176*8kB (UMH) 155*16kB (UMH) 21*32kB (UMH) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5604kB 3088 total pagecache pages [ 103.322188] 0 pages in swap cache [ 103.322191] Swap cache stats: add 0, delete 0, find 0/0 [ 103.322193] Free swap = 0kB [ 103.322195] Total swap = 0kB [ 103.322197] 1965979 pages RAM [ 103.322199] 0 pages HighMem/MovableOnly [ 103.322201] 313617 pages reserved [ 103.322204] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 103.322217] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 103.322226] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 103.322236] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 103.322245] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 103.322255] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 103.322264] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 103.322273] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 103.322283] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 103.322297] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 103.322307] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 103.322316] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 103.322326] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 103.322335] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 103.322344] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 103.322355] [ 2086] 0 2086 18048 14 22 2 0 0 syz-executor.4 [ 103.322365] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 103.322374] [ 2089] 0 2089 18048 8702 23 2 0 0 syz-executor.5 [ 103.322384] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 103.322393] [ 2091] 0 2091 18048 8731 23 2 0 0 syz-executor.2 [ 103.322403] [ 2092] 0 2092 18048 8731 24 2 0 0 syz-executor.4 [ 103.322414] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 103.322425] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 103.322435] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 103.322444] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 103.322459] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 103.322468] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 103.322477] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 103.322487] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 103.322496] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 103.322506] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 103.322522] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 103.322533] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 103.322538] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 103.322676] Killed process 2086 (syz-executor.4) total-vm:72192kB, anon-rss:56kB, file-rss:0kB, shmem-rss:0kB [ 103.574460] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 103.574470] CPU: 0 PID: 3464 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 103.574486] ffff8801971675c0 ffffffff81b42e79 ffff880197167980 ffffffff833e92b0 [ 103.574497] 00000000000003e8 ffff880197167998 0000000000000000 ffff880197167640 [ 103.574507] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 103.574509] Call Trace: [ 103.574524] [] dump_stack+0xc1/0x128 [ 103.574535] [] dump_header.isra.4+0x142/0x747 [ 103.574545] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 103.574553] [] ? ___ratelimit+0x53/0x401 [ 103.574562] [] oom_kill_process.cold.10+0xd/0xa6e [ 103.574569] [] ? _raw_spin_unlock+0x2c/0x50 [ 103.574578] [] ? check_preemption_disabled+0x3b/0x200 [ 103.574587] [] ? out_of_memory+0x6d4/0xe90 [ 103.574596] [] out_of_memory+0x292/0xe90 [ 103.574603] [] ? out_of_memory+0x410/0xe90 [ 103.574612] [] ? oom_killer_disable+0x200/0x200 [ 103.574620] [] ? trace_hardirqs_on+0xd/0x10 [ 103.574629] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 103.574638] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 103.574646] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 103.574655] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 103.574663] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 103.574674] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 103.574683] [] __vmalloc_node_range+0x25b/0x600 [ 103.574693] [] ? xt_alloc_table_info+0xc9/0x100 [ 103.574700] [] vmalloc+0x5b/0x70 [ 103.574707] [] ? xt_alloc_table_info+0xc9/0x100 [ 103.574715] [] xt_alloc_table_info+0xc9/0x100 [ 103.574725] [] compat_do_replace.isra.10+0x116/0x380 [ 103.574734] [] ? translate_compat_table+0x1790/0x1790 [ 103.574743] [] ? mutex_lock_nested+0x6b7/0x900 [ 103.574751] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 103.574761] [] ? __cap_capable+0x168/0x1c0 [ 103.574772] [] ? ns_capable_common+0x12a/0x150 [ 103.574780] [] compat_do_ipt_set_ctl+0x102/0x140 [ 103.574789] [] compat_nf_setsockopt+0x8b/0x130 [ 103.574798] [] ? compat_do_replace.isra.10+0x380/0x380 [ 103.574807] [] compat_ip_setsockopt+0x97/0xd0 [ 103.574817] [] inet_csk_compat_setsockopt+0x97/0x120 [ 103.574825] [] ? ip_setsockopt+0xa0/0xa0 [ 103.574833] [] compat_tcp_setsockopt+0x3d/0x70 [ 103.574843] [] compat_sock_common_setsockopt+0xb4/0x150 [ 103.574850] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 103.574860] [] compat_SyS_setsockopt+0x169/0x550 [ 103.574868] [] ? sock_common_setsockopt+0xe0/0xe0 [ 103.574876] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 103.574887] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 103.574895] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 103.574903] [] ? do_fast_syscall_32+0xcf/0xa10 [ 103.574912] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 103.574919] [] do_fast_syscall_32+0x2f1/0xa10 [ 103.574928] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 103.574937] [] entry_SYSENTER_compat+0x90/0xa2 [ 103.574941] Mem-Info: [ 103.574959] active_anon:53861 inactive_anon:2912 isolated_anon:0 [ 103.574959] active_file:19 inactive_file:19 isolated_file:0 [ 103.574959] unevictable:2 dirty:0 writeback:0 unstable:0 [ 103.574959] slab_reclaimable:4142 slab_unreclaimable:63113 [ 103.574959] mapped:28988 shmem:3047 pagetables:644 bounce:0 [ 103.574959] free:1424 free_pcp:0 free_cma:0 [ 103.574973] Node 0 active_anon:215444kB inactive_anon:11648kB active_file:76kB inactive_file:76kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:115952kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 103.574992] DMA32 free:132kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 103.575020] Normal free:5564kB min:5580kB low:9168kB high:12756kB active_anon:215412kB inactive_anon:11640kB active_file:76kB inactive_file:76kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251908kB kernel_stack:4192kB pagetables:2576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 103.575068] DMA32: 3*4kB (UM) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 132kB Normal: 230*4kB (UMH) 173*8kB (UMH) 157*16kB (UMH) 23*32kB (UMH) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5616kB 3096 total pagecache pages [ 103.575113] 0 pages in swap cache [ 103.575117] Swap cache stats: add 0, delete 0, find 0/0 [ 103.575120] Free swap = 0kB [ 103.575122] Total swap = 0kB [ 103.575124] 1965979 pages RAM [ 103.575126] 0 pages HighMem/MovableOnly [ 103.575129] 313617 pages reserved [ 103.575131] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 103.575149] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 103.575160] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 103.575171] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 103.575181] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 103.575190] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 103.575197] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 103.575205] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 103.575213] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 103.575220] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 103.575228] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 103.575235] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 103.575243] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 103.575251] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 103.575258] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 103.575269] [ 2088] 0 2088 18048 14 22 2 0 0 syz-executor.2 [ 103.575281] [ 2089] 0 2089 18048 8702 23 2 0 0 syz-executor.5 [ 103.575289] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 103.575297] [ 2091] 0 2091 18048 8731 23 2 0 0 syz-executor.2 [ 103.575311] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 103.575323] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 103.575334] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 103.575345] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 103.575361] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 103.575370] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 103.575378] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 103.575385] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 103.575393] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 103.575401] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 103.575416] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 103.575427] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 103.575433] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 103.575482] Killed process 2088 (syz-executor.2) total-vm:72192kB, anon-rss:56kB, file-rss:0kB, shmem-rss:0kB [ 103.861990] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 103.862000] CPU: 0 PID: 3470 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 103.862017] ffff88018b0975c0 ffffffff81b42e79 ffff88018b097980 ffffffff833e92b0 [ 103.862028] 00000000000003e8 ffff88018b097998 0000000000000000 ffff88018b097640 [ 103.862038] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 103.862040] Call Trace: [ 103.862056] [] dump_stack+0xc1/0x128 [ 103.862067] [] dump_header.isra.4+0x142/0x747 [ 103.862076] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 103.862085] [] ? ___ratelimit+0x53/0x401 [ 103.862093] [] oom_kill_process.cold.10+0xd/0xa6e [ 103.862100] [] ? _raw_spin_unlock+0x2c/0x50 [ 103.862110] [] ? check_preemption_disabled+0x3b/0x200 [ 103.862119] [] ? out_of_memory+0x6d4/0xe90 [ 103.862127] [] out_of_memory+0x292/0xe90 [ 103.862135] [] ? out_of_memory+0x410/0xe90 [ 103.862143] [] ? oom_killer_disable+0x200/0x200 [ 103.862152] [] ? trace_hardirqs_on+0xd/0x10 [ 103.862161] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 103.862170] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 103.862177] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 103.862187] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 103.862194] [] ? retint_kernel+0x2d/0x2d [ 103.862202] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 103.862212] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 103.862220] [] ? retint_kernel+0x2d/0x2d [ 103.862229] [] __vmalloc_node_range+0x25b/0x600 [ 103.862242] [] ? xt_alloc_table_info+0xc9/0x100 [ 103.862249] [] vmalloc+0x5b/0x70 [ 103.862257] [] ? xt_alloc_table_info+0xc9/0x100 [ 103.862265] [] xt_alloc_table_info+0xc9/0x100 [ 103.862275] [] compat_do_replace.isra.10+0x116/0x380 [ 103.862283] [] ? translate_compat_table+0x1790/0x1790 [ 103.862298] [] ? mutex_lock_nested+0x6b7/0x900 [ 103.862306] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 103.862316] [] ? __cap_capable+0x168/0x1c0 [ 103.862326] [] ? ns_capable_common+0x12a/0x150 [ 103.862335] [] compat_do_ipt_set_ctl+0x102/0x140 [ 103.862344] [] compat_nf_setsockopt+0x8b/0x130 [ 103.862353] [] ? compat_do_replace.isra.10+0x380/0x380 [ 103.862363] [] compat_ip_setsockopt+0x97/0xd0 [ 103.862373] [] inet_csk_compat_setsockopt+0x97/0x120 [ 103.862380] [] ? ip_setsockopt+0xa0/0xa0 [ 103.862388] [] compat_tcp_setsockopt+0x3d/0x70 [ 103.862398] [] compat_sock_common_setsockopt+0xb4/0x150 [ 103.862406] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 103.862415] [] compat_SyS_setsockopt+0x169/0x550 [ 103.862422] [] ? sock_common_setsockopt+0xe0/0xe0 [ 103.862431] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 103.862442] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 103.862450] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 103.862458] [] ? do_fast_syscall_32+0xcf/0xa10 [ 103.862466] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 103.862474] [] do_fast_syscall_32+0x2f1/0xa10 [ 103.862482] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 103.862491] [] entry_SYSENTER_compat+0x90/0xa2 [ 103.862494] Mem-Info: [ 103.862514] active_anon:53836 inactive_anon:2912 isolated_anon:0 [ 103.862514] active_file:19 inactive_file:28 isolated_file:0 [ 103.862514] unevictable:2 dirty:0 writeback:0 unstable:0 [ 103.862514] slab_reclaimable:4142 slab_unreclaimable:63113 [ 103.862514] mapped:20288 shmem:3047 pagetables:644 bounce:0 [ 103.862514] free:1425 free_pcp:65 free_cma:0 [ 103.862528] Node 0 active_anon:215344kB inactive_anon:11648kB active_file:76kB inactive_file:112kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:81152kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 103.862547] DMA32 free:132kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 103.862575] Normal free:5568kB min:5580kB low:9168kB high:12756kB active_anon:215312kB inactive_anon:11640kB active_file:76kB inactive_file:112kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251908kB kernel_stack:4160kB pagetables:2576kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 103.862627] DMA32: 3*4kB (UM) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 132kB Normal: 211*4kB (MH) 177*8kB (UMH) 151*16kB (UMH) 25*32kB (UMH) 2*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5604kB 3095 total pagecache pages [ 103.862672] 0 pages in swap cache [ 103.862676] Swap cache stats: add 0, delete 0, find 0/0 [ 103.862678] Free swap = 0kB [ 103.862680] Total swap = 0kB [ 103.862683] 1965979 pages RAM [ 103.862685] 0 pages HighMem/MovableOnly [ 103.862687] 313617 pages reserved [ 103.862689] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 103.862706] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 103.862717] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 103.862729] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 103.862739] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 103.862748] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 103.862756] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 103.862764] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 103.862772] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 103.862780] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 103.862789] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 103.862796] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 103.862805] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 103.862812] [ 2083] 0 2083 18048 13 22 2 0 0 syz-executor.0 [ 103.862820] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 103.862832] [ 2089] 0 2089 18048 8702 23 2 0 0 syz-executor.5 [ 103.862840] [ 2090] 0 2090 18048 8730 23 2 0 0 syz-executor.0 [ 103.862855] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 103.862867] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 103.862877] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 103.862888] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 103.862905] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 103.862913] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 103.862921] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 103.862929] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 103.862936] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 103.862944] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 103.862959] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 103.862970] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 103.862976] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 103.863024] Killed process 2083 (syz-executor.0) total-vm:72192kB, anon-rss:52kB, file-rss:0kB, shmem-rss:0kB [ 104.263388] lowmemorykiller: Killing 'syz-executor.5' (3445) (tgid 3412), adj 1000, [ 104.263388] to free 11508kB on behalf of 'syz-executor.5' (3464) because [ 104.263388] cache 184kB is below limit 6144kB for oom_score_adj 0 [ 104.263388] Free memory is -31800kB above reserved [ 104.264537] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 104.264546] CPU: 1 PID: 3464 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 104.264563] ffff8801971675c0 ffffffff81b42e79 ffff880197167980 ffffffff833e92b0 [ 104.264574] 00000000000003e8 ffff880197167998 0000000000000000 ffff880197167640 [ 104.264584] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 104.264586] Call Trace: [ 104.264602] [] dump_stack+0xc1/0x128 [ 104.264613] [] dump_header.isra.4+0x142/0x747 [ 104.264622] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 104.264630] [] ? ___ratelimit+0x53/0x401 [ 104.264639] [] oom_kill_process.cold.10+0xd/0xa6e [ 104.264647] [] ? _raw_spin_unlock+0x2c/0x50 [ 104.264656] [] ? check_preemption_disabled+0x3b/0x200 [ 104.264665] [] ? out_of_memory+0x6d4/0xe90 [ 104.264673] [] out_of_memory+0x292/0xe90 [ 104.264681] [] ? out_of_memory+0x410/0xe90 [ 104.264690] [] ? oom_killer_disable+0x200/0x200 [ 104.264698] [] ? trace_hardirqs_on+0xd/0x10 [ 104.264707] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 104.264716] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 104.264724] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 104.264734] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 104.264741] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 104.264752] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 104.264766] [] __vmalloc_node_range+0x25b/0x600 [ 104.264775] [] ? xt_alloc_table_info+0xc9/0x100 [ 104.264782] [] vmalloc+0x5b/0x70 [ 104.264790] [] ? xt_alloc_table_info+0xc9/0x100 [ 104.264797] [] xt_alloc_table_info+0xc9/0x100 [ 104.264808] [] compat_do_replace.isra.10+0x116/0x380 [ 104.264816] [] ? translate_compat_table+0x1790/0x1790 [ 104.264826] [] ? mutex_lock_nested+0x6b7/0x900 [ 104.264834] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 104.264845] [] ? __cap_capable+0x168/0x1c0 [ 104.264856] [] ? ns_capable_common+0x12a/0x150 [ 104.264865] [] compat_do_ipt_set_ctl+0x102/0x140 [ 104.264875] [] compat_nf_setsockopt+0x8b/0x130 [ 104.264883] [] ? compat_do_replace.isra.10+0x380/0x380 [ 104.264894] [] compat_ip_setsockopt+0x97/0xd0 [ 104.264905] [] inet_csk_compat_setsockopt+0x97/0x120 [ 104.264913] [] ? ip_setsockopt+0xa0/0xa0 [ 104.264920] [] compat_tcp_setsockopt+0x3d/0x70 [ 104.264930] [] compat_sock_common_setsockopt+0xb4/0x150 [ 104.264938] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 104.264947] [] compat_SyS_setsockopt+0x169/0x550 [ 104.264955] [] ? sock_common_setsockopt+0xe0/0xe0 [ 104.264963] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 104.264973] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 104.264982] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 104.264990] [] ? do_fast_syscall_32+0xcf/0xa10 [ 104.264998] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 104.265006] [] do_fast_syscall_32+0x2f1/0xa10 [ 104.265014] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 104.265021] [] entry_SYSENTER_compat+0x90/0xa2 [ 104.265024] Mem-Info: [ 104.265040] active_anon:53811 inactive_anon:2912 isolated_anon:0 [ 104.265040] active_file:31 inactive_file:59 isolated_file:0 [ 104.265040] unevictable:2 dirty:0 writeback:0 unstable:0 [ 104.265040] slab_reclaimable:4142 slab_unreclaimable:63141 [ 104.265040] mapped:11613 shmem:3047 pagetables:570 bounce:0 [ 104.265040] free:1955 free_pcp:78 free_cma:0 [ 104.265052] Node 0 active_anon:215244kB inactive_anon:11648kB active_file:124kB inactive_file:236kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:46452kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:195 all_unreclaimable? no [ 104.265068] DMA32 free:132kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 104.265091] Normal free:7688kB min:5580kB low:9168kB high:12756kB active_anon:215212kB inactive_anon:11640kB active_file:124kB inactive_file:236kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:252020kB kernel_stack:4128kB pagetables:2280kB bounce:0kB free_pcp:308kB local_pcp:180kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 104.265130] DMA32: 3*4kB (UM) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 132kB Normal: 216*4kB (UMH) 177*8kB (MH) 141*16kB (MH) 12*32kB (UMH) 1*64kB (H) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 7672kB 3144 total pagecache pages [ 104.265171] 0 pages in swap cache [ 104.265175] Swap cache stats: add 0, delete 0, find 0/0 [ 104.265176] Free swap = 0kB [ 104.265178] Total swap = 0kB [ 104.265180] 1965979 pages RAM [ 104.265182] 0 pages HighMem/MovableOnly [ 104.265184] 313617 pages reserved [ 104.265186] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 104.265204] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 104.265214] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 104.265223] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 104.265233] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 104.265242] [ 1888] 0 1888 14264 108 23 3 0 0 rsyslogd [ 104.265251] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 104.265260] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 104.265269] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 104.265278] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 104.265287] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 104.265296] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 104.265306] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 104.265316] [ 2084] 0 2084 18048 13 22 2 0 0 syz-executor.5 [ 104.265329] [ 2089] 0 2089 18048 8702 23 2 0 0 syz-executor.5 [ 104.265343] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 104.265353] [ 2306] 0 2306 5364 168 14 3 0 -1000 udevd [ 104.265363] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 104.265372] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 104.265386] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 104.265395] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 104.265404] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 104.265413] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 104.265422] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 104.265431] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 104.265448] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 104.265457] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 104.265462] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 104.265510] Killed process 2084 (syz-executor.5) total-vm:72192kB, anon-rss:52kB, file-rss:0kB, shmem-rss:0kB [ 104.335472] getty invoked oom-killer: gfp_mask=0x24201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=0, order=0, oom_score_adj=0 [ 104.335480] CPU: 1 PID: 3086 Comm: getty Not tainted 4.9.141+ #23 [ 104.335496] ffff8801d980f6f8 ffffffff81b42e79 ffff8801d980fab8 ffffffff833e92b0 [ 104.335506] 0000000000000000 ffff8801d980fad0 0000000000000000 ffff8801d980f778 [ 104.335516] ffffffff814fb526 0000000000000000 0000000000000000 ffffffff82816fa5 [ 104.335517] Call Trace: [ 104.335533] [] dump_stack+0xc1/0x128 [ 104.335543] [] dump_header.isra.4+0x142/0x747 [ 104.335551] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 104.335559] [] ? ___ratelimit+0x53/0x401 [ 104.335567] [] oom_kill_process.cold.10+0xd/0xa6e [ 104.335574] [] ? _raw_spin_unlock+0x2c/0x50 [ 104.335583] [] ? check_preemption_disabled+0x3b/0x200 [ 104.335591] [] ? out_of_memory+0x6d4/0xe90 [ 104.335597] [] out_of_memory+0x292/0xe90 [ 104.335604] [] ? out_of_memory+0x410/0xe90 [ 104.335611] [] ? oom_killer_disable+0x200/0x200 [ 104.335618] [] ? trace_hardirqs_on+0xd/0x10 [ 104.335626] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 104.335634] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 104.335642] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 104.335651] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 104.335659] [] ? radix_tree_lookup_slot+0x85/0xc0 [ 104.335666] [] ? find_get_entry+0x11a/0x570 [ 104.335673] [] ? find_get_entry+0x141/0x570 [ 104.335680] [] ? page_cache_prev_hole+0x80/0x80 [ 104.335689] [] ? autoremove_wake_function+0x40/0x40 [ 104.335696] [] ? pagecache_get_page+0x131/0x710 [ 104.335703] [] filemap_fault+0xaf1/0x1110 [ 104.335712] [] ext4_filemap_fault+0x71/0xa0 [ 104.335719] [] __do_fault+0x223/0x500 [ 104.335726] [] ? do_page_mkwrite+0x3e0/0x3e0 [ 104.335733] [] ? handle_mm_fault+0x1d4f/0x2350 [ 104.335741] [] handle_mm_fault+0x1326/0x2350 [ 104.335748] [] ? vm_insert_page+0x6f0/0x6f0 [ 104.335762] [] ? hrtimer_nanosleep+0x38c/0x550 [ 104.335769] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 104.335778] [] __do_page_fault+0x403/0xa60 [ 104.335786] [] ? bad_area_access_error+0x3a0/0x3a0 [ 104.335796] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 104.335803] [] do_page_fault+0x27/0x30 [ 104.335811] [] page_fault+0x25/0x30 [ 104.335814] Mem-Info: [ 104.335832] active_anon:53790 inactive_anon:2912 isolated_anon:0 [ 104.335832] active_file:114 inactive_file:162 isolated_file:32 [ 104.335832] unevictable:2 dirty:0 writeback:0 unstable:0 [ 104.335832] slab_reclaimable:4142 slab_unreclaimable:63175 [ 104.335832] mapped:11803 shmem:3047 pagetables:526 bounce:0 [ 104.335832] free:1402 free_pcp:95 free_cma:0 [ 104.335845] Node 0 active_anon:215160kB inactive_anon:11648kB active_file:456kB inactive_file:648kB unevictable:8kB isolated(anon):0kB isolated(file):128kB mapped:47212kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:129 all_unreclaimable? no [ 104.335863] DMA32 free:132kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 104.335890] Normal free:5476kB min:5580kB low:9168kB high:12756kB active_anon:215128kB inactive_anon:11640kB active_file:456kB inactive_file:648kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:252156kB kernel_stack:4096kB pagetables:2104kB bounce:0kB free_pcp:380kB local_pcp:156kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 104.335937] DMA32: 3*4kB (UM) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 132kB Normal: 67*4kB (MH) 131*8kB (MH) 140*16kB (MH) 12*32kB (UMH) 2*64kB (UH) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 5476kB 3394 total pagecache pages [ 104.335986] 0 pages in swap cache [ 104.335990] Swap cache stats: add 0, delete 0, find 0/0 [ 104.335992] Free swap = 0kB [ 104.335994] Total swap = 0kB [ 104.335996] 1965979 pages RAM [ 104.335999] 0 pages HighMem/MovableOnly [ 104.336001] 313617 pages reserved [ 104.336003] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 104.336019] [ 470] 0 470 5384 179 16 3 0 -1000 udevd [ 104.336029] [ 581] 0 581 5383 180 14 3 0 -1000 udevd [ 104.336037] [ 582] 0 582 5381 180 14 3 0 -1000 udevd [ 104.336045] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 104.336052] [ 1888] 0 1888 14264 152 23 3 0 0 rsyslogd [ 104.336060] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 104.336067] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 104.336075] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 104.336085] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 104.336095] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 104.336105] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 104.336115] [ 2049] 0 2049 83116 49911 125 6 0 0 syz-fuzzer [ 104.336131] [ 2089] 0 2089 18048 8702 23 2 0 0 syz-executor.5 [ 104.336146] [ 2264] 0 2264 5383 180 14 3 0 -1000 udevd [ 104.336154] [ 2306] 0 2306 5352 232 14 3 0 -1000 udevd [ 104.336162] [ 2311] 0 2311 5364 169 14 3 0 -1000 udevd [ 104.336170] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 104.336183] [ 3085] 0 3085 3648 41 13 3 0 0 getty [ 104.336190] [ 3086] 0 3086 3648 42 13 3 0 0 getty [ 104.336197] [ 3094] 0 3094 3648 43 13 4 0 0 getty [ 104.336204] [ 3096] 0 3096 3648 41 13 3 0 0 getty [ 104.336212] [ 3099] 0 3099 3648 41 13 3 0 0 getty [ 104.336219] [ 3100] 0 3100 3648 43 13 3 0 0 getty [ 104.336233] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 104.336244] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 104.336249] Out of memory: Kill process 2049 (syz-fuzzer) score 29 or sacrifice child [ 104.336339] Killed process 2049 (syz-fuzzer) total-vm:332464kB, anon-rss:199644kB, file-rss:0kB, shmem-rss:0kB [ 104.922369] oom_reaper: reaped process 2049 (syz-fuzzer), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 104.992847] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 104.992856] CPU: 1 PID: 3468 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 104.992870] ffff8801922ff5c0 ffffffff81b42e79 ffff8801922ff980 ffffffff833e92b0 [ 104.992880] 00000000000003e8 ffff8801922ff998 0000000000000000 ffff8801922ff640 [ 104.992890] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 104.992891] Call Trace: [ 104.992905] [] dump_stack+0xc1/0x128 [ 104.992917] [] dump_header.isra.4+0x142/0x747 [ 104.992926] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 104.992933] [] ? ___ratelimit+0x53/0x401 [ 104.992941] [] oom_kill_process.cold.10+0xd/0xa6e [ 104.992951] [] ? has_capability_noaudit+0x24/0x30 [ 104.992960] [] ? check_preemption_disabled+0x3b/0x200 [ 104.992968] [] ? out_of_memory+0x6d4/0xe90 [ 104.992976] [] out_of_memory+0x292/0xe90 [ 104.992983] [] ? out_of_memory+0x410/0xe90 [ 104.992990] [] ? oom_killer_disable+0x200/0x200 [ 104.992998] [] ? trace_hardirqs_on+0xd/0x10 [ 104.993006] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 104.993014] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 104.993021] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 104.993030] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 104.993037] [] ? retint_kernel+0x2d/0x2d [ 104.993044] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 104.993053] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 104.993061] [] ? check_preemption_disabled+0x3b/0x200 [ 104.993068] [] ? retint_kernel+0x2d/0x2d [ 104.993075] [] __vmalloc_node_range+0x25b/0x600 [ 104.993083] [] ? xt_alloc_table_info+0xc9/0x100 [ 104.993090] [] vmalloc+0x5b/0x70 [ 104.993097] [] ? xt_alloc_table_info+0xc9/0x100 [ 104.993104] [] xt_alloc_table_info+0xc9/0x100 [ 104.993113] [] compat_do_replace.isra.10+0x116/0x380 [ 104.993121] [] ? translate_compat_table+0x1790/0x1790 [ 104.993129] [] ? mutex_lock_nested+0x6b7/0x900 [ 104.993136] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 104.993145] [] ? __cap_capable+0x168/0x1c0 [ 104.993153] [] ? ns_capable_common+0x12a/0x150 [ 104.993161] [] compat_do_ipt_set_ctl+0x102/0x140 [ 104.993169] [] compat_nf_setsockopt+0x8b/0x130 [ 104.993177] [] ? compat_do_replace.isra.10+0x380/0x380 [ 104.993185] [] compat_ip_setsockopt+0x97/0xd0 [ 104.993194] [] inet_csk_compat_setsockopt+0x97/0x120 [ 104.993201] [] ? ip_setsockopt+0xa0/0xa0 [ 104.993209] [] compat_tcp_setsockopt+0x3d/0x70 [ 104.993218] [] compat_sock_common_setsockopt+0xb4/0x150 [ 104.993225] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 104.993233] [] compat_SyS_setsockopt+0x169/0x550 [ 104.993241] [] ? sock_common_setsockopt+0xe0/0xe0 [ 104.993249] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 104.993258] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 104.993266] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 104.993273] [] ? do_fast_syscall_32+0xcf/0xa10 [ 104.993281] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 104.993287] [] do_fast_syscall_32+0x2f1/0xa10 [ 104.993295] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 104.993307] [] entry_SYSENTER_compat+0x90/0xa2 [ 105.003381] Mem-Info: [ 105.003398] active_anon:3129 inactive_anon:2912 isolated_anon:0 [ 105.003398] active_file:14 inactive_file:41 isolated_file:0 [ 105.003398] unevictable:2 dirty:0 writeback:0 unstable:0 [ 105.003398] slab_reclaimable:4142 slab_unreclaimable:63201 [ 105.003398] mapped:2924 shmem:3047 pagetables:384 bounce:0 [ 105.003398] free:1426 free_pcp:30 free_cma:0 [ 105.003411] Node 0 active_anon:12516kB inactive_anon:11648kB active_file:56kB inactive_file:164kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:11696kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 105.003430] DMA32 free:132kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 105.003456] Normal free:5572kB min:5580kB low:9168kB high:12756kB active_anon:12484kB inactive_anon:11640kB active_file:56kB inactive_file:164kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:252260kB kernel_stack:3584kB pagetables:1536kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 105.003499] DMA32: 4*4kB (UM) 4*8kB (UM) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 160kB Normal: 630*4kB (MEH) 126*8kB (UMH) 55*16kB (UMH) 17*32kB (UMH) 6*64kB (UH) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5592kB 3096 total pagecache pages [ 105.003541] 0 pages in swap cache [ 105.003545] Swap cache stats: add 0, delete 0, find 0/0 [ 105.003547] Free swap = 0kB [ 105.003549] Total swap = 0kB [ 105.003551] 1965979 pages RAM [ 105.003553] 0 pages HighMem/MovableOnly [ 105.003555] 313617 pages reserved [ 105.003558] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 105.003575] [ 470] 0 470 5365 169 16 3 0 -1000 udevd [ 105.003585] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 105.003595] [ 1888] 0 1888 14363 283 23 3 0 0 rsyslogd [ 105.003605] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 105.003614] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 105.003625] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 105.003635] [ 1980] 0 1980 12926 1231 26 3 0 0 restorecond [ 105.003645] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 105.003655] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 105.003666] [ 2054] 0 2049 83116 0 125 6 0 0 syz-fuzzer [ 105.003687] [ 2311] 0 2311 5364 168 14 3 0 -1000 udevd [ 105.003697] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 105.003720] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 105.003731] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 105.003742] [ 3482] 0 3482 5364 168 14 3 0 -1000 udevd [ 105.003753] [ 3483] 0 3483 2666 34 10 3 0 0 init [ 105.003758] Out of memory: Kill process 1980 (restorecond) score 0 or sacrifice child [ 105.003787] Killed process 1980 (restorecond) total-vm:51704kB, anon-rss:4924kB, file-rss:0kB, shmem-rss:0kB [ 105.060330] init invoked oom-killer: gfp_mask=0x27080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOTRACK), nodemask=0, order=3, oom_score_adj=0 [ 105.060338] CPU: 0 PID: 1 Comm: init Not tainted 4.9.141+ #23 [ 105.060352] ffff8801da6077c0 ffffffff81b42e79 ffff8801da607b80 ffffffff833e92b0 [ 105.060362] 0000000000000000 ffff8801da607b98 0000000000000003 ffff8801da607840 [ 105.060372] ffffffff814fb526 0000000000000003 0000000000000000 ffffffff82816fa5 [ 105.060374] Call Trace: [ 105.060388] [] dump_stack+0xc1/0x128 [ 105.060398] [] dump_header.isra.4+0x142/0x747 [ 105.060407] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 105.060415] [] ? ___ratelimit+0x53/0x401 [ 105.060422] [] oom_kill_process.cold.10+0xd/0xa6e [ 105.060432] [] ? has_capability_noaudit+0x24/0x30 [ 105.060440] [] ? check_preemption_disabled+0x3b/0x200 [ 105.060450] [] ? out_of_memory+0x6d4/0xe90 [ 105.060457] [] out_of_memory+0x292/0xe90 [ 105.060464] [] ? out_of_memory+0x410/0xe90 [ 105.060472] [] ? oom_killer_disable+0x200/0x200 [ 105.060480] [] ? trace_hardirqs_on+0xd/0x10 [ 105.060488] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 105.060496] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 105.060505] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 105.060515] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 105.060524] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 105.060533] [] ? kmem_cache_alloc+0x246/0x2b0 [ 105.060542] [] copy_process.part.8+0x280/0x6a10 [ 105.060550] [] ? handle_mm_fault+0x1a5b/0x2350 [ 105.060557] [] ? _raw_spin_unlock+0x2c/0x50 [ 105.060565] [] ? __cleanup_sighand+0x40/0x40 [ 105.060572] [] ? vm_insert_page+0x6f0/0x6f0 [ 105.060579] [] _do_fork+0x1b2/0xd30 [ 105.060587] [] ? fork_idle+0x270/0x270 [ 105.060595] [] ? up_read+0x1a/0x40 [ 105.060603] [] ? __do_page_fault+0x554/0xa60 [ 105.060610] [] SyS_clone+0x37/0x50 [ 105.060617] [] ? sys_vfork+0x30/0x30 [ 105.060625] [] do_syscall_64+0x19f/0x550 [ 105.060633] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 105.060636] Mem-Info: [ 105.060653] active_anon:1904 inactive_anon:2912 isolated_anon:0 [ 105.060653] active_file:1 inactive_file:28 isolated_file:0 [ 105.060653] unevictable:2 dirty:0 writeback:0 unstable:0 [ 105.060653] slab_reclaimable:4142 slab_unreclaimable:62918 [ 105.060653] mapped:2899 shmem:3047 pagetables:384 bounce:0 [ 105.060653] free:1432 free_pcp:0 free_cma:0 [ 105.060666] Node 0 active_anon:7616kB inactive_anon:11648kB active_file:4kB inactive_file:112kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:11596kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 105.060684] DMA32 free:132kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 105.060709] Normal free:5596kB min:5580kB low:9168kB high:12756kB active_anon:7584kB inactive_anon:11640kB active_file:4kB inactive_file:112kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251128kB kernel_stack:3552kB pagetables:1536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 105.060754] DMA32: 4*4kB (UM) 4*8kB (UM) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 160kB Normal: 491*4kB (UMEH) 110*8kB (UMH) 58*16kB (UMH) 30*32kB (UMH) 15*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5692kB 3106 total pagecache pages [ 105.060797] 0 pages in swap cache [ 105.060801] Swap cache stats: add 0, delete 0, find 0/0 [ 105.060803] Free swap = 0kB [ 105.060805] Total swap = 0kB [ 105.060807] 1965979 pages RAM [ 105.060809] 0 pages HighMem/MovableOnly [ 105.060812] 313617 pages reserved [ 105.060814] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 105.060827] [ 470] 0 470 5365 169 16 3 0 -1000 udevd [ 105.060835] [ 1749] 0 1749 2492 572 9 3 0 0 dhclient [ 105.060842] [ 1888] 0 1888 14363 283 23 3 0 0 rsyslogd [ 105.060849] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 105.060857] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 105.060864] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 105.060872] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 105.060879] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 105.060887] [ 2054] 0 2049 83116 0 125 6 0 0 syz-fuzzer [ 105.060910] [ 2311] 0 2311 5364 168 14 3 0 -1000 udevd [ 105.060920] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 105.060939] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 105.060950] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 105.060960] [ 3482] 0 3482 5364 168 14 3 0 -1000 udevd [ 105.060970] [ 3483] 0 3483 2666 34 10 3 0 0 init [ 105.060975] Out of memory: Kill process 1749 (dhclient) score 0 or sacrifice child [ 105.060999] Killed process 1749 (dhclient) total-vm:9968kB, anon-rss:2288kB, file-rss:0kB, shmem-rss:0kB [ 105.126389] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 105.126409] CPU: 1 PID: 3468 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 105.126424] ffff8801922ff5c0 ffffffff81b42e79 ffff8801922ff980 ffffffff833e92b0 [ 105.126434] 00000000000003e8 ffff8801922ff998 0000000000000000 ffff8801922ff640 [ 105.126444] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 105.126446] Call Trace: [ 105.126462] [] dump_stack+0xc1/0x128 [ 105.126474] [] dump_header.isra.4+0x142/0x747 [ 105.126482] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 105.126491] [] ? ___ratelimit+0x53/0x401 [ 105.126500] [] oom_kill_process.cold.10+0xd/0xa6e [ 105.126510] [] ? has_capability_noaudit+0x24/0x30 [ 105.126520] [] ? check_preemption_disabled+0x3b/0x200 [ 105.126530] [] ? out_of_memory+0x6d4/0xe90 [ 105.126538] [] out_of_memory+0x292/0xe90 [ 105.126546] [] ? out_of_memory+0x410/0xe90 [ 105.126554] [] ? oom_killer_disable+0x200/0x200 [ 105.126563] [] ? trace_hardirqs_on+0xd/0x10 [ 105.126572] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 105.126581] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 105.126588] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 105.126597] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 105.126605] [] ? retint_kernel+0x2d/0x2d [ 105.126613] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.126622] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.126631] [] ? check_preemption_disabled+0x3b/0x200 [ 105.126638] [] ? retint_kernel+0x2d/0x2d [ 105.126647] [] __vmalloc_node_range+0x25b/0x600 [ 105.126656] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.126663] [] vmalloc+0x5b/0x70 [ 105.126671] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.126678] [] xt_alloc_table_info+0xc9/0x100 [ 105.126688] [] compat_do_replace.isra.10+0x116/0x380 [ 105.126697] [] ? translate_compat_table+0x1790/0x1790 [ 105.126712] [] ? mutex_lock_nested+0x6b7/0x900 [ 105.126720] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.126731] [] ? __cap_capable+0x168/0x1c0 [ 105.126740] [] ? ns_capable_common+0x12a/0x150 [ 105.126749] [] compat_do_ipt_set_ctl+0x102/0x140 [ 105.126759] [] compat_nf_setsockopt+0x8b/0x130 [ 105.126767] [] ? compat_do_replace.isra.10+0x380/0x380 [ 105.126777] [] compat_ip_setsockopt+0x97/0xd0 [ 105.126787] [] inet_csk_compat_setsockopt+0x97/0x120 [ 105.126795] [] ? ip_setsockopt+0xa0/0xa0 [ 105.126802] [] compat_tcp_setsockopt+0x3d/0x70 [ 105.126812] [] compat_sock_common_setsockopt+0xb4/0x150 [ 105.126820] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 105.126830] [] compat_SyS_setsockopt+0x169/0x550 [ 105.126838] [] ? sock_common_setsockopt+0xe0/0xe0 [ 105.126847] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.126857] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 105.126866] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 105.126873] [] ? do_fast_syscall_32+0xcf/0xa10 [ 105.126882] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.126889] [] do_fast_syscall_32+0x2f1/0xa10 [ 105.126898] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.126906] [] entry_SYSENTER_compat+0x90/0xa2 [ 105.126910] Mem-Info: [ 105.126928] active_anon:1329 inactive_anon:2912 isolated_anon:0 [ 105.126928] active_file:25 inactive_file:50 isolated_file:17 [ 105.126928] unevictable:2 dirty:0 writeback:0 unstable:0 [ 105.126928] slab_reclaimable:4142 slab_unreclaimable:62946 [ 105.126928] mapped:2974 shmem:3047 pagetables:384 bounce:0 [ 105.126928] free:3903 free_pcp:30 free_cma:0 [ 105.126943] Node 0 active_anon:5316kB inactive_anon:11648kB active_file:100kB inactive_file:200kB unevictable:8kB isolated(anon):0kB isolated(file):68kB mapped:11896kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 105.126963] DMA32 free:10232kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 105.126991] Normal free:5380kB min:5580kB low:9168kB high:12756kB active_anon:5284kB inactive_anon:11640kB active_file:100kB inactive_file:200kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251240kB kernel_stack:3552kB pagetables:1536kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 105.127040] DMA32: 86*4kB (UM) 86*8kB (UM) 83*16kB (U) 87*32kB (U) 81*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10328kB Normal: 440*4kB (UMEH) 117*8kB (MEH) 57*16kB (MEH) 32*32kB (MEH) 12*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5400kB 3186 total pagecache pages [ 105.127085] 0 pages in swap cache [ 105.127089] Swap cache stats: add 0, delete 0, find 0/0 [ 105.127091] Free swap = 0kB [ 105.127093] Total swap = 0kB [ 105.127096] 1965979 pages RAM [ 105.127098] 0 pages HighMem/MovableOnly [ 105.127100] 313617 pages reserved [ 105.127103] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 105.127119] [ 470] 0 470 5365 169 16 3 0 -1000 udevd [ 105.127131] [ 1888] 0 1888 14363 283 23 3 0 0 rsyslogd [ 105.127142] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 105.127152] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 105.127162] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 105.127172] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 105.127183] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 105.127195] [ 2054] 0 2049 83116 0 125 6 0 0 syz-fuzzer [ 105.127218] [ 2311] 0 2311 5364 168 14 3 0 -1000 udevd [ 105.127229] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 105.127245] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 105.127255] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 105.127265] [ 3482] 0 3482 5364 168 14 3 0 -1000 udevd [ 105.127275] [ 3483] 0 3483 2666 34 10 3 0 0 init [ 105.127281] Out of memory: Kill process 1888 (rsyslogd) score 0 or sacrifice child [ 105.127322] Killed process 1888 (rsyslogd) total-vm:57452kB, anon-rss:1132kB, file-rss:0kB, shmem-rss:0kB [ 105.129244] oom_reaper: reaped process 1888 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 105.145115] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 105.145125] CPU: 1 PID: 3468 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 105.145140] ffff8801922ff5c0 ffffffff81b42e79 ffff8801922ff980 ffffffff833e92b0 [ 105.145151] 00000000000003e8 ffff8801922ff998 0000000000000000 ffff8801922ff640 [ 105.145162] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 105.145164] Call Trace: [ 105.145180] [] dump_stack+0xc1/0x128 [ 105.145191] [] dump_header.isra.4+0x142/0x747 [ 105.145200] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 105.145208] [] ? ___ratelimit+0x53/0x401 [ 105.145216] [] oom_kill_process.cold.10+0xd/0xa6e [ 105.145226] [] ? has_capability_noaudit+0x24/0x30 [ 105.145237] [] ? check_preemption_disabled+0x3b/0x200 [ 105.145246] [] ? out_of_memory+0x6d4/0xe90 [ 105.145254] [] out_of_memory+0x292/0xe90 [ 105.145262] [] ? out_of_memory+0x410/0xe90 [ 105.145271] [] ? oom_killer_disable+0x200/0x200 [ 105.145279] [] ? trace_hardirqs_on+0xd/0x10 [ 105.145288] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 105.145297] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 105.145304] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 105.145313] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 105.145321] [] ? retint_kernel+0x2d/0x2d [ 105.145329] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.145339] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.145348] [] ? check_preemption_disabled+0x3b/0x200 [ 105.145355] [] ? retint_kernel+0x2d/0x2d [ 105.145363] [] __vmalloc_node_range+0x25b/0x600 [ 105.145372] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.145379] [] vmalloc+0x5b/0x70 [ 105.145387] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.145394] [] xt_alloc_table_info+0xc9/0x100 [ 105.145405] [] compat_do_replace.isra.10+0x116/0x380 [ 105.145413] [] ? translate_compat_table+0x1790/0x1790 [ 105.145423] [] ? mutex_lock_nested+0x6b7/0x900 [ 105.145431] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.145440] [] ? __cap_capable+0x168/0x1c0 [ 105.145449] [] ? ns_capable_common+0x12a/0x150 [ 105.145458] [] compat_do_ipt_set_ctl+0x102/0x140 [ 105.145467] [] compat_nf_setsockopt+0x8b/0x130 [ 105.145476] [] ? compat_do_replace.isra.10+0x380/0x380 [ 105.145485] [] compat_ip_setsockopt+0x97/0xd0 [ 105.145495] [] inet_csk_compat_setsockopt+0x97/0x120 [ 105.145503] [] ? ip_setsockopt+0xa0/0xa0 [ 105.145511] [] compat_tcp_setsockopt+0x3d/0x70 [ 105.145520] [] compat_sock_common_setsockopt+0xb4/0x150 [ 105.145528] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 105.145539] [] compat_SyS_setsockopt+0x169/0x550 [ 105.145546] [] ? sock_common_setsockopt+0xe0/0xe0 [ 105.145555] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.145566] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 105.145575] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 105.145582] [] ? do_fast_syscall_32+0xcf/0xa10 [ 105.145591] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.145598] [] do_fast_syscall_32+0x2f1/0xa10 [ 105.145607] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.145615] [] entry_SYSENTER_compat+0x90/0xa2 [ 105.145619] Mem-Info: [ 105.145637] active_anon:1054 inactive_anon:2912 isolated_anon:0 [ 105.145637] active_file:50 inactive_file:50 isolated_file:17 [ 105.145637] unevictable:2 dirty:0 writeback:0 unstable:0 [ 105.145637] slab_reclaimable:4142 slab_unreclaimable:62971 [ 105.145637] mapped:2899 shmem:3047 pagetables:384 bounce:0 [ 105.145637] free:4352 free_pcp:30 free_cma:0 [ 105.145652] Node 0 active_anon:4216kB inactive_anon:11648kB active_file:200kB inactive_file:200kB unevictable:8kB isolated(anon):0kB isolated(file):68kB mapped:11596kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 105.145671] DMA32 free:11932kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 105.145699] Normal free:5476kB min:5580kB low:9168kB high:12756kB active_anon:4184kB inactive_anon:11640kB active_file:200kB inactive_file:200kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251340kB kernel_stack:3488kB pagetables:1536kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 105.145754] DMA32: 99*4kB (UM) 102*8kB (UM) 94*16kB (U) 101*32kB (U) 92*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11964kB Normal: 501*4kB (UMEH) 133*8kB (MEH) 51*16kB (MEH) 29*32kB (UMEH) 11*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5516kB 3161 total pagecache pages [ 105.145799] 0 pages in swap cache [ 105.145803] Swap cache stats: add 0, delete 0, find 0/0 [ 105.145805] Free swap = 0kB [ 105.145808] Total swap = 0kB [ 105.145810] 1965979 pages RAM [ 105.145812] 0 pages HighMem/MovableOnly [ 105.145815] 313617 pages reserved [ 105.145818] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 105.145834] [ 470] 0 470 5365 169 16 3 0 -1000 udevd [ 105.145848] [ 1890] 0 1888 14363 1 23 3 0 0 rsyslogd [ 105.145858] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 105.145867] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 105.145877] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 105.145887] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 105.145898] [ 2047] 0 2047 17820 196 40 3 0 0 sshd [ 105.145909] [ 2054] 0 2049 83116 0 125 6 0 0 syz-fuzzer [ 105.145933] [ 2311] 0 2311 5364 168 14 3 0 -1000 udevd [ 105.145943] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 105.145964] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 105.145975] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 105.145986] [ 3482] 0 3482 5364 168 14 3 0 -1000 udevd [ 105.145997] [ 3483] 0 3483 2666 34 10 3 0 0 init [ 105.146002] Out of memory: Kill process 2047 (sshd) score 0 or sacrifice child [ 105.146026] Killed process 2047 (sshd) total-vm:71280kB, anon-rss:780kB, file-rss:0kB, shmem-rss:4kB [ 105.164984] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 105.164992] CPU: 1 PID: 3468 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 105.165006] ffff8801922ff5c0 ffffffff81b42e79 ffff8801922ff980 ffffffff833e92b0 [ 105.165015] 00000000000003e8 ffff8801922ff998 0000000000000000 ffff8801922ff640 [ 105.165025] ffffffff814fb526 0000000000000000 00000000000003e8 ffffffff82816fa5 [ 105.165027] Call Trace: [ 105.165041] [] dump_stack+0xc1/0x128 [ 105.165051] [] dump_header.isra.4+0x142/0x747 [ 105.165060] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 105.165067] [] ? ___ratelimit+0x53/0x401 [ 105.165075] [] oom_kill_process.cold.10+0xd/0xa6e [ 105.165084] [] ? has_capability_noaudit+0x24/0x30 [ 105.165093] [] ? check_preemption_disabled+0x3b/0x200 [ 105.165101] [] ? out_of_memory+0x6d4/0xe90 [ 105.165109] [] out_of_memory+0x292/0xe90 [ 105.165116] [] ? out_of_memory+0x410/0xe90 [ 105.165123] [] ? oom_killer_disable+0x200/0x200 [ 105.165131] [] ? trace_hardirqs_on+0xd/0x10 [ 105.165139] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 105.165147] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 105.165154] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 105.165163] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 105.165170] [] ? retint_kernel+0x2d/0x2d [ 105.165177] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.165186] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.165194] [] ? check_preemption_disabled+0x3b/0x200 [ 105.165200] [] ? retint_kernel+0x2d/0x2d [ 105.165208] [] __vmalloc_node_range+0x25b/0x600 [ 105.165216] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.165223] [] vmalloc+0x5b/0x70 [ 105.165230] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.165236] [] xt_alloc_table_info+0xc9/0x100 [ 105.165245] [] compat_do_replace.isra.10+0x116/0x380 [ 105.165253] [] ? translate_compat_table+0x1790/0x1790 [ 105.165261] [] ? mutex_lock_nested+0x6b7/0x900 [ 105.165268] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.165277] [] ? __cap_capable+0x168/0x1c0 [ 105.165286] [] ? ns_capable_common+0x12a/0x150 [ 105.165294] [] compat_do_ipt_set_ctl+0x102/0x140 [ 105.165302] [] compat_nf_setsockopt+0x8b/0x130 [ 105.165310] [] ? compat_do_replace.isra.10+0x380/0x380 [ 105.165319] [] compat_ip_setsockopt+0x97/0xd0 [ 105.165327] [] inet_csk_compat_setsockopt+0x97/0x120 [ 105.165335] [] ? ip_setsockopt+0xa0/0xa0 [ 105.165341] [] compat_tcp_setsockopt+0x3d/0x70 [ 105.165350] [] compat_sock_common_setsockopt+0xb4/0x150 [ 105.165357] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 105.165365] [] compat_SyS_setsockopt+0x169/0x550 [ 105.165372] [] ? sock_common_setsockopt+0xe0/0xe0 [ 105.165380] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.165390] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 105.165398] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 105.165405] [] ? do_fast_syscall_32+0xcf/0xa10 [ 105.165413] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.165420] [] do_fast_syscall_32+0x2f1/0xa10 [ 105.165428] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.165435] [] entry_SYSENTER_compat+0x90/0xa2 [ 105.165439] Mem-Info: [ 105.165456] active_anon:829 inactive_anon:2912 isolated_anon:0 [ 105.165456] active_file:13 inactive_file:50 isolated_file:17 [ 105.165456] unevictable:2 dirty:0 writeback:0 unstable:0 [ 105.165456] slab_reclaimable:4142 slab_unreclaimable:62971 [ 105.165456] mapped:2899 shmem:3047 pagetables:347 bounce:0 [ 105.165456] free:4368 free_pcp:211 free_cma:0 [ 105.165469] Node 0 active_anon:3316kB inactive_anon:11648kB active_file:52kB inactive_file:200kB unevictable:8kB isolated(anon):0kB isolated(file):68kB mapped:11596kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:30 all_unreclaimable? no [ 105.165487] DMA32 free:11932kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 105.165513] Normal free:5540kB min:5580kB low:9168kB high:12756kB active_anon:3284kB inactive_anon:11640kB active_file:52kB inactive_file:200kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251340kB kernel_stack:3488kB pagetables:1388kB bounce:0kB free_pcp:844kB local_pcp:188kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 105.165557] DMA32: 99*4kB (UM) 102*8kB (UM) 94*16kB (U) 101*32kB (U) 92*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11964kB Normal: 533*4kB (UMEH) 138*8kB (UMEH) 52*16kB (MEH) 27*32kB (UMEH) 11*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5636kB 3161 total pagecache pages [ 105.165598] 0 pages in swap cache [ 105.165603] Swap cache stats: add 0, delete 0, find 0/0 [ 105.165604] Free swap = 0kB [ 105.165606] Total swap = 0kB [ 105.165608] 1965979 pages RAM [ 105.165610] 0 pages HighMem/MovableOnly [ 105.165612] 313617 pages reserved [ 105.165615] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 105.165631] [ 470] 0 470 5365 169 16 3 0 -1000 udevd [ 105.165642] [ 1890] 0 1888 14363 1 23 3 0 0 rsyslogd [ 105.165652] [ 1936] 0 1936 4724 51 14 3 0 0 cron [ 105.165662] [ 1961] 0 1961 3735 45 11 3 0 0 mcstransd [ 105.165671] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 105.165681] [ 2019] 0 2019 3648 39 13 3 0 0 getty [ 105.165693] [ 2054] 0 2049 83116 0 125 6 0 0 syz-fuzzer [ 105.165718] [ 2311] 0 2311 5364 168 14 3 0 -1000 udevd [ 105.165728] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 105.165746] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 105.165757] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 105.165767] [ 3482] 0 3482 5364 168 14 3 0 -1000 udevd [ 105.165777] [ 3483] 0 3483 2666 34 10 3 0 0 init [ 105.165783] Out of memory: Kill process 1936 (cron) score 0 or sacrifice child [ 105.165808] Killed process 1936 (cron) total-vm:18896kB, anon-rss:200kB, file-rss:4kB, shmem-rss:0kB [ 105.173778] Out of memory: Kill process 1961 (mcstransd) score 0 or sacrifice child [ 105.173803] Killed process 1961 (mcstransd) total-vm:14940kB, anon-rss:180kB, file-rss:0kB, shmem-rss:0kB [ 105.174118] oom_reaper: reaped process 1961 (mcstransd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 105.192756] Out of memory: Kill process 2019 (getty) score 0 or sacrifice child [ 105.192783] Killed process 2019 (getty) total-vm:14592kB, anon-rss:152kB, file-rss:4kB, shmem-rss:0kB [ 105.221471] Out of memory: Kill process 3483 (init) score 0 or sacrifice child [ 105.221489] Killed process 3483 (init) total-vm:10664kB, anon-rss:136kB, file-rss:0kB, shmem-rss:0kB [ 105.221697] oom_reaper: reaped process 3483 (init), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 105.233229] syz-executor.5 invoked oom-killer: gfp_mask=0x24002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=0, order=0, oom_score_adj=1000 [ 105.233238] CPU: 0 PID: 3448 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 105.233253] ffff8801a8247668 ffffffff81b42e79 ffff8801a8247980 ffffffff833e92b0 [ 105.233263] 00000000000003e8 ffff8801a8247998 0000000000000000 ffff8801a82476e8 [ 105.233273] ffffffff814fb526 0000000000000000 00000000000003e8 ffff8801caa72068 [ 105.233274] Call Trace: [ 105.233289] [] dump_stack+0xc1/0x128 [ 105.233299] [] dump_header.isra.4+0x142/0x747 [ 105.233312] [] ? out_of_memory+0x6d4/0xe90 [ 105.233320] [] out_of_memory.cold.11+0xd/0x5d [ 105.233328] [] ? out_of_memory+0x410/0xe90 [ 105.233336] [] ? oom_killer_disable+0x200/0x200 [ 105.233344] [] ? trace_hardirqs_on+0xd/0x10 [ 105.233352] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 105.233360] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 105.233369] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 105.233379] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.233387] [] ? check_preemption_disabled+0x3b/0x200 [ 105.233395] [] ? retint_kernel+0x2d/0x2d [ 105.233403] [] __vmalloc_node_range+0x25b/0x600 [ 105.233411] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.233418] [] vmalloc+0x5b/0x70 [ 105.233425] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.233431] [] xt_alloc_table_info+0xc9/0x100 [ 105.233440] [] compat_do_replace.isra.10+0x116/0x380 [ 105.233448] [] ? translate_compat_table+0x1790/0x1790 [ 105.233456] [] ? mutex_lock_nested+0x6b7/0x900 [ 105.233464] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.233473] [] ? __cap_capable+0x168/0x1c0 [ 105.233483] [] ? ns_capable_common+0x12a/0x150 [ 105.233492] [] compat_do_ipt_set_ctl+0x102/0x140 [ 105.233501] [] compat_nf_setsockopt+0x8b/0x130 [ 105.233509] [] ? compat_do_replace.isra.10+0x380/0x380 [ 105.233517] [] compat_ip_setsockopt+0x97/0xd0 [ 105.233526] [] inet_csk_compat_setsockopt+0x97/0x120 [ 105.233534] [] ? ip_setsockopt+0xa0/0xa0 [ 105.233541] [] compat_tcp_setsockopt+0x3d/0x70 [ 105.233549] [] compat_sock_common_setsockopt+0xb4/0x150 [ 105.233556] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 105.233565] [] compat_SyS_setsockopt+0x169/0x550 [ 105.233572] [] ? sock_common_setsockopt+0xe0/0xe0 [ 105.233580] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.233589] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 105.233597] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 105.233604] [] ? do_fast_syscall_32+0xcf/0xa10 [ 105.233612] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.233618] [] do_fast_syscall_32+0x2f1/0xa10 [ 105.233627] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.233634] [] entry_SYSENTER_compat+0x90/0xa2 [ 105.252893] Mem-Info: [ 105.252915] active_anon:704 inactive_anon:2912 isolated_anon:0 [ 105.252915] active_file:13 inactive_file:22 isolated_file:17 [ 105.252915] unevictable:2 dirty:0 writeback:0 unstable:0 [ 105.252915] slab_reclaimable:4142 slab_unreclaimable:62971 [ 105.252915] mapped:2899 shmem:3047 pagetables:310 bounce:0 [ 105.252915] free:6064 free_pcp:131 free_cma:0 [ 105.252930] Node 0 active_anon:2816kB inactive_anon:11648kB active_file:52kB inactive_file:88kB unevictable:8kB isolated(anon):0kB isolated(file):68kB mapped:11596kB dirty:0kB writeback:0kB shmem:12188kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 105.252949] DMA32 free:18696kB min:4696kB low:7712kB high:10728kB active_anon:32kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:544kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:356kB local_pcp:120kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 105.252978] Normal free:5560kB min:5580kB low:9168kB high:12756kB active_anon:2784kB inactive_anon:11640kB active_file:52kB inactive_file:88kB unevictable:8kB writepending:0kB present:4718592kB managed:3589316kB mlocked:8kB slab_reclaimable:16568kB slab_unreclaimable:251340kB kernel_stack:3392kB pagetables:1240kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 105.253034] DMA32: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (U) 237*64kB (UM) 7*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18696kB Normal: 635*4kB (UMEH) 164*8kB (UMH) 57*16kB (UMH) 20*32kB (UMH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5596kB 3136 total pagecache pages [ 105.253079] 0 pages in swap cache [ 105.253083] Swap cache stats: add 0, delete 0, find 0/0 [ 105.253085] Free swap = 0kB [ 105.253087] Total swap = 0kB [ 105.253090] 1965979 pages RAM [ 105.253092] 0 pages HighMem/MovableOnly [ 105.253094] 313617 pages reserved [ 105.253097] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 105.253117] [ 470] 0 470 5365 169 16 3 0 -1000 udevd [ 105.253129] [ 1890] 0 1888 14363 2 23 3 0 0 rsyslogd [ 105.253142] [ 1971] 0 1971 12489 153 27 3 0 -1000 sshd [ 105.253152] [ 2054] 0 2049 83116 0 125 6 0 0 syz-fuzzer [ 105.253176] [ 2311] 0 2311 5364 168 14 3 0 -1000 udevd [ 105.253188] [ 2578] 0 2578 5364 169 14 3 0 -1000 udevd [ 105.253213] [ 3445] 0 3412 18312 2877 32 2 0 1000 syz-executor.5 [ 105.253225] [ 3437] 0 3437 18312 2877 32 2 0 1000 syz-executor.5 [ 105.253237] [ 3482] 0 3482 5364 168 14 3 0 -1000 udevd [ 105.253249] [ 3483] 0 3483 2666 0 10 3 0 0 init [ 105.253255] Kernel panic - not syncing: Out of memory and no killable processes... [ 105.253255] [ 105.253264] CPU: 0 PID: 3448 Comm: syz-executor.5 Not tainted 4.9.141+ #23 [ 105.253279] ffff8801a8247628 ffffffff81b42e79 ffffffff82a962c0 00000000ffffffff [ 105.253290] ffffffff83029100 0000000000000000 dffffc0000000000 ffff8801a82476e8 [ 105.253301] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 105.253303] Call Trace: [ 105.253322] [] dump_stack+0xc1/0x128 [ 105.253331] [] panic+0x1bf/0x39f [ 105.253339] [] ? add_taint.cold.5+0x16/0x16 [ 105.253348] [] ? dump_header.isra.4+0x738/0x747 [ 105.253356] [] ? dump_header.isra.4+0x738/0x747 [ 105.253363] [] out_of_memory.cold.11+0x1e/0x5d [ 105.253371] [] ? out_of_memory+0x410/0xe90 [ 105.253379] [] ? oom_killer_disable+0x200/0x200 [ 105.253387] [] ? trace_hardirqs_on+0xd/0x10 [ 105.253396] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 105.253405] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 105.253415] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 105.253426] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.253435] [] ? check_preemption_disabled+0x3b/0x200 [ 105.253444] [] ? retint_kernel+0x2d/0x2d [ 105.253453] [] __vmalloc_node_range+0x25b/0x600 [ 105.253463] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.253470] [] vmalloc+0x5b/0x70 [ 105.253477] [] ? xt_alloc_table_info+0xc9/0x100 [ 105.253485] [] xt_alloc_table_info+0xc9/0x100 [ 105.253495] [] compat_do_replace.isra.10+0x116/0x380 [ 105.253504] [] ? translate_compat_table+0x1790/0x1790 [ 105.253513] [] ? mutex_lock_nested+0x6b7/0x900 [ 105.253521] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 105.253531] [] ? __cap_capable+0x168/0x1c0 [ 105.253542] [] ? ns_capable_common+0x12a/0x150 [ 105.253550] [] compat_do_ipt_set_ctl+0x102/0x140 [ 105.253559] [] compat_nf_setsockopt+0x8b/0x130 [ 105.253568] [] ? compat_do_replace.isra.10+0x380/0x380 [ 105.253578] [] compat_ip_setsockopt+0x97/0xd0 [ 105.253588] [] inet_csk_compat_setsockopt+0x97/0x120 [ 105.253596] [] ? ip_setsockopt+0xa0/0xa0 [ 105.253604] [] compat_tcp_setsockopt+0x3d/0x70 [ 105.253614] [] compat_sock_common_setsockopt+0xb4/0x150 [ 105.253622] [] ? do_tcp_setsockopt.isra.5+0x1ca0/0x1ca0 [ 105.253632] [] compat_SyS_setsockopt+0x169/0x550 [ 105.253640] [] ? sock_common_setsockopt+0xe0/0xe0 [ 105.253648] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.253659] [] ? compat_SyS_clock_gettime+0x131/0x1b0 [ 105.253668] [] ? compat_SyS_clock_settime+0x1a0/0x1a0 [ 105.253675] [] ? do_fast_syscall_32+0xcf/0xa10 [ 105.253684] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 105.253691] [] do_fast_syscall_32+0x2f1/0xa10 [ 105.253700] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 105.253708] [] entry_SYSENTER_compat+0x90/0xa2 [ 105.254312] Kernel Offset: disabled