[ 13.532977] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.855772] random: sshd: uninitialized urandom read (32 bytes read) [ 17.377803] audit: type=1400 audit(1573142850.529:6): avc: denied { map } for pid=1764 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 17.428086] random: sshd: uninitialized urandom read (32 bytes read) [ 18.058359] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.21' (ECDSA) to the list of known hosts. [ 23.524747] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/07 16:07:36 fuzzer started [ 23.636913] audit: type=1400 audit(1573142856.789:7): avc: denied { map } for pid=1773 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.229759] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/07 16:07:39 dialing manager at 10.128.0.26:41051 2019/11/07 16:07:39 syscalls: 1372 2019/11/07 16:07:39 code coverage: enabled 2019/11/07 16:07:39 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/07 16:07:39 extra coverage: extra coverage is not supported by the kernel 2019/11/07 16:07:39 setuid sandbox: enabled 2019/11/07 16:07:39 namespace sandbox: enabled 2019/11/07 16:07:39 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/07 16:07:39 fault injection: CONFIG_FAULT_INJECTION is not enabled 2019/11/07 16:07:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/07 16:07:39 net packet injection: enabled 2019/11/07 16:07:39 net device setup: enabled 2019/11/07 16:07:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/07 16:07:39 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 27.850637] random: crng init done INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 16:09:36 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x90100, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/60) r2 = getpgid(0x0) ptrace$pokeuser(0x6, r2, 0x6, 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x800) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000001c0)={r5, 0x0, 0x9, 0x2, 0x1f}) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x20) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000000240)=""/116) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x120, 0x2c8, 0x0, 0x120, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f00000002c0), {[{{@ip={@multicast1, @multicast1, 0xff0000ff, 0xff, 'ip6erspan0\x00', 'irlan0\x00', {}, {}, 0xc, 0x1, 0x74}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x280, 0xf38, 0x1, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x80, @local, 0x4e23}}}, {{@ip={@rand_addr=0xffffff43, @remote, 0xffffffff, 0x0, 'veth1\x00', 'veth1_to_bond\x00', {}, {}, 0x2, 0x0, 0x2}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x5}}}, {{@ip={@multicast2, @rand_addr=0xfff, 0x0, 0xff000000, 'veth1_to_team\x00', 'ip6erspan0\x00', {}, {0xff}, 0x6, 0x5, 0x30}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x20}}}, {{@ip={@multicast1, @empty, 0x4855aa788b2aabf1, 0xffff00, 'bridge_slave_1\x00', 'bond0\x00', {}, {0x7f}, 0x21, 0x2, 0x30}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7128, 0x0, 0x5, 0x173e, 0x0, 0x10000], 0x9, 0x5}, {0x0, [0xc579, 0x80, 0x7ff, 0x8, 0xfffffff9, 0x7bef], 0x7f, 0x6}}}}, {{@ip={@rand_addr=0x1, @multicast2, 0x0, 0xff000000, 'team_slave_1\x00', 'syzkaller1\x00', {}, {}, 0x4, 0x2, 0x20}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1000, 0x7f, @ipv4=@remote, 0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000900)='/dev/null\x00', 0xfed57d9f2ba958dc, 0x0) ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f0000000940)="1e0554a2d5e701ff281458756f9844c7d7222ebb8c29e5832c8bc57f88470a30953b0aa6d01717ae436e3230cbd5d757603fb47f114a68830f166663ff87c4d6e843d98143be4ac73bd332dd565998982d62b387ad3b90566548ced9fea79160bd1eb8583c6a4988a00a3eaef48d596a0ce458c9437f5511fbbd00f787b685393fd1c7c5a507284bc5a248e67c4695894a6975117c31e2ed5712a60039c38c168be0c4899fa03d5172e3dd447f18e110ddad488dab9a0bdde06c43d4fef4705d51fe3f5d544ff2f549aa935bc1d9bb79768f7f9f538531d944f7066c3634be33db1d220181f2c2895d3d71262b14") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000a40)={0x0, 0x0, 0xffffffff, 0x1, 0x7b, 0x101}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)={0x18, 0xffff9499, 0xdb32, 0x400, 0x0, r0, 0x3814, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) fcntl$setownex(r8, 0xf, &(0x7f0000000ac0)={0x2, r2}) r9 = dup3(r3, 0xffffffffffffffff, 0x180000) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000b00)=0xffffffffffffffff) r10 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000b40), 0x80000) getpeername(r10, &(0x7f0000000b80)=@sco, &(0x7f0000000c00)=0x80) r11 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000c40)='/selinux/context\x00', 0x2, 0x0) fcntl$getown(r11, 0x9) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000c80)={0x5, 0x400, 0x4, 0x1f, 0x7f, 0x7}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000cc0)={0xa000000, {{0xa, 0x4e24, 0x1000, @remote, 0x6}}, 0x0, 0xa, [{{0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {{0xa, 0x4e21, 0x1ff, @empty, 0x3}}, {{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x20}, 0x1}}, {{0xa, 0x4e23, 0x6, @ipv4={[], [], @remote}, 0x200}}, {{0xa, 0x4e22, 0x1ff, @ipv4={[], [], @local}, 0x3}}, {{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffd}}, {{0xa, 0x4e20, 0x7, @local, 0x2}}, {{0xa, 0x4e20, 0x1, @mcast1, 0xfffffc01}}, {{0xa, 0x4e23, 0x80000000, @local, 0xfff}}, {{0xa, 0x4e20, 0xffffffff, @rand_addr="8bcc42f066f70742d2a7e0e37882a5fa", 0x24}}]}, 0x590) 16:09:36 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6c4600, 0x7e24cc0300d88c2b) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x6, 0x9, 0x101, 0x7, 0xd, 0x5, 0x81, 0x4, 0x825c, 0x3, 0x4c, 0x52}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') ioctl$TIOCNOTTY(r2, 0x5422) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)={0xe7a, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x0, 0xa, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e21, @empty}}]}, 0x590) r3 = openat(r0, &(0x7f0000000780)='./file0/file0\x00', 0xe4000, 0xb489a26a61c48191) mknodat(r3, &(0x7f00000007c0)='./file0/file0\x00', 0x8000, 0x1ff) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/enforce\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000001840)={0x14, 0x1000, &(0x7f0000000840)="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"}) openat$ion(0xffffffffffffff9c, &(0x7f0000001880)='/dev/ion\x00', 0xd1e943aff235115b, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000018c0)={'icmp6\x00'}, &(0x7f0000001900)=0x1e) r6 = getpid() fcntl$setown(r5, 0x8, r6) ioctl$RTC_WIE_ON(r0, 0x700f) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001940)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000001a40)={0x11, 0xb2, &(0x7f0000001980)="93ee271a4cea95c86122c47cfd92f3a6a50cba71d1690d3be58c781b8417ee5dc914d6c063a3641030b90353ab2188fb5cc903d8baf2682c1d1b124bac0e3a7225b0d922f7f7c6dae0dd41dcea93a1a85929d6eda5f10f9ee0b864a14b632930f6fd0e23aeaf685feaa59bc6f5b6da5bcc6afb7909bb71c1a518201b4acc6b93eee987d51b8c4e8485aaab7ce616ba06e22be6b72e0acf0d5f898853cab5cd65b8540e86ad6d87a8ff41df80489191f25058"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001a80)={0x5, 0x3, 0x4, 0x3, 0x15, 0x2, 0x9, 0x44, 0xffffffff, 0x9, 0x3, 0x8}) r8 = open(&(0x7f0000001ac0)='./file0\x00', 0x80000, 0xa4) ioctl$ASHMEM_GET_PROT_MASK(r8, 0x7706, &(0x7f0000001b00)) syslog(0x0, &(0x7f0000001b40)=""/195, 0xc3) openat$uhid(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/uhid\x00', 0x61fe1003376d1686, 0x0) mknod(&(0x7f0000001c80)='./file0/file0\x00', 0x4, 0xee3e) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000001cc0)={0x2, 0x0, @broadcast}, &(0x7f0000001d00)=0x10) getsockopt$inet_opts(r9, 0x0, 0x9, &(0x7f0000001d40)=""/4096, &(0x7f0000002d40)=0x1000) 16:09:36 executing program 1: sync() r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x21a) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x5, 0x1, 0x7, 0x5, 0xf4, 0x1ff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x5a}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x75, &(0x7f0000000100)=""/117, 0x41000, 0x0, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x5, 0x7, 0x4c48}, 0x10}, 0x70) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U-', 0x9}, 0x28, 0x2) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000b00)=@nat={'nat\x00', 0x19, 0x5, 0x77e, [0x20000380, 0x0, 0x0, 0x200005fc, 0x200007aa], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00', 'nr0\x00', 'irlan0\x00', @random="d27b13a9c0ce", [0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x537d5f0866096cd0, 0x0, 0x0, 0x0, 0xff, 0xed7833431471489f], 0x9e, 0x9e, 0xd6, [@state={'state\x00', 0x8, {{0x8}}}], [], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}, {0x3, 0x40, 0x8914, 'veth0_to_team\x00', 'bond_slave_1\x00', 'veth0_to_hsr\x00', 'vxcan1\x00', @random="9e04b04df67b", [0xff, 0x80, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x1f}, [0x0, 0x0, 0xff, 0xff, 0x0, 0x101], 0xce, 0x13e, 0x176, [@arp={'arp\x00', 0x38, {{0x2, 0x15, 0x8, @multicast1, 0xff, @dev={0xac, 0x14, 0x14, 0x22}, 0x0, @remote, [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x80, 0x0, 0xff], 0x25}}}], [@snat={'snat\x00', 0x10, {{@random="9c5c2528f949", 0x10}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0x8, 0x8035, 'gre0\x00', 'irlan0\x00', 'hwsim0\x00', 'dummy0\x00', @dev={[], 0x11}, [0x0, 0xff, 0xff, 0x0, 0xff], @link_local, [0x0, 0x0, 0x80, 0xff, 0x0, 0x1fe], 0xde, 0x146, 0x17e, [@mark_m={'mark_m\x00', 0x18, {{0x34f, 0x6, 0x2, 0x3}}}, @pkttype={'pkttype\x00', 0x8}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffff8}}}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x10}, 0x10}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x11, 0x10, 0x8914, 'yam0\x00', 'syzkaller1\x00', 'veth0\x00', 'vlan0\x00', @empty, [0x0, 0xff, 0x17e, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x80], 0xfe, 0x136, 0x16e, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x8}}}, @connbytes={'connbytes\x00', 0x18, {{0x2, 0x6, 0x2}}}], [@snat={'snat\x00', 0x10, {{@remote, 0x10}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffe}}}}, {0x3, 0x70, 0x88a8, 'nlmon0\x00', 'syzkaller0\x00', 'bond_slave_0\x00', 'bridge0\x00', @local, [0x0, 0xff, 0x80], @broadcast, [0xff, 0x0, 0x0, 0x101, 0x0, 0x101], 0xde, 0x14e, 0x186, [@connbytes={'connbytes\x00', 0x18, {{0x3, 0x4, 0x0, 0x2}}}, @pkttype={'pkttype\x00', 0x8, {{0x2}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0x1}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x7f6) r3 = accept$unix(r0, &(0x7f0000000b80)=@abs, &(0x7f0000000c00)=0x6e) write(r3, &(0x7f0000000c40)="02e62d0eeb27d44c1faf2be1f30a62665d50fad51f9c72b626c0ee68a2ae9fe3eeb4b12fdcc60391386249071e11e2a2010d99979591711e53d414eac552cc84f67e37d3a0411f77695377d1", 0x4c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000cc0)='SEG6\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000d00)=0x0) getpriority(0x1, r4) r5 = socket$inet6(0xa, 0x6, 0x49) fcntl$setsig(r5, 0xa, 0x41) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000d40)={'security\x00', 0x2, [{}, {}]}, 0x48) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000dc0)={0x4, 0x2, 0xb823, 0x4}, 0x10) openat$cgroup_int(r0, &(0x7f0000000e00)='io.weight\x00', 0x2, 0x0) creat(&(0x7f0000000e40)='./file0\x00', 0x80) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000e80)='/selinux/mls\x00', 0x0, 0x0) futimesat(r6, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={{0x0, 0x7530}, {0x0, 0x7530}}) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/create\x00', 0x2, 0x0) writev(r7, &(0x7f0000002280)=[{&(0x7f0000000f80)="64e348817acf1bc313bd61f389db9edad1e36a27e9c3ed8dc08797646b02d49a38b4cc9bdc84cd17c6aeb50e224c5fc31e055890c36f8ff9a89dcf39c334309ad74ccca74a973ef9f3a917c817e93a758b5ead9ed08a7d8b3eb09ca4a0dbc6a081c8f2c04b42a1d8c43ca5b996b0418f1b712d108300106a48d5be9ced", 0x7d}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="4f5f864103dedb6eecda10226739f56bd4153463b30ed35a8966907820d6647be8df5bc0790cd3f7b7fb693c907cb02176fe674b9cd5cfe35596d37a0c052e26a4f2099bade54fb150bb4311f4f73ebe5a1c1b153bcf8bac094c8a3e24d36e42d48d5fe0db5356a786667698ef415e6503b8850e94fe0549d1baff85dc7fd7e2a3163eb539af5c2aba86ff05ebc35bc7f646", 0x92}, {&(0x7f00000020c0)="5fdf37337d26562d595810b4a45fea5d84591e59b47bcf6a", 0x18}, {&(0x7f0000002100)="251031ac2668bea3cfd647599c9525cdb6c5f0c261a5b2a799a9fd56842a5c2c162a287cc1233afa6ac3f359ddcadabdae944f43ba903c15fd5c01e98920dda3003494e7f7630ab1371cb155e2010bfb43419f823a01a62d3d1516ec47f137afa5a32158556bbf9c3be0bc68d56d3dfa7fa697ec8f025d00562957e41aeb18440d564d708102553eb032607d8518967b1eb32792e70618aba64c31f09a8d87be910b5400db7d9c8e0d7a5c2b3b4ca9c0f0dab41b7a", 0xb5}, {&(0x7f00000021c0)="ce61d58328d5a0e96be5d5b85ab70e4feae506952a14de6b6ddf4371299c2d55879870af25ece9fe41b4a21f90a18a6c8d4c55023b85aabc02c758f0e9bafa5210360aa015c62f769870959ca53078b22a5af0f9cfa5a039680c662c517b2468d524692a6ff6d5be0354f5fb0bc010f5861116cd3c076ab7d062edf7b0661f1e1918613812df573e88ac463dcd36623bfd", 0x91}], 0x6) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000002300)={{0x758, 0x5, 0xc10, 0x1}, 'syz1\x00', 0x3d}) signalfd(r3, &(0x7f0000002380)={0x1}, 0x8) getsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f00000023c0), &(0x7f0000002400)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000002480)='bpq0\x00') r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f00000024c0)={0x1, {0xfffffff9, 0x8, 0x40, 0x9, 0x8, 0xfffffff8}}) 16:09:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x8041) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000180)={@rand_addr, @loopback, @dev}, &(0x7f00000001c0)=0xc) r2 = getpid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r0, 0xcea6454a3cebf99e, 0x2, 0x40, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x20) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x5b1f23a758da98f9) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x200000, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x5, 0x9, 0x1f, 0x6a, 0x0, 0x0, 0x1800, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000380)}, 0x4000, 0x0, 0xa4, 0x1, 0x8e76, 0x3, 0xce2}, r2, 0x0, 0xffffffffffffffff, 0x2) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x6, 0x1, 0x1ff, 0x5}, 'syz0\x00', 0x1e}) rt_sigqueueinfo(r2, 0x34, &(0x7f00000004c0)={0x11, 0xe1, 0x1}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e20, 0x80000000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) ioctl$TIOCEXCL(r0, 0x540c) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x5) r7 = dup2(r4, 0xffffffffffffffff) flistxattr(r7, &(0x7f0000000680)=""/195, 0xc3) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f00000007c0)) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000800)=0x10400082) sendto$inet6(r9, &(0x7f0000000840), 0x0, 0x882, 0x0, 0x0) r10 = syz_open_procfs(r2, &(0x7f0000000880)='net/rpc\x00') ftruncate(r10, 0xffffffffffff7fff) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f00000008c0)={@remote}, &(0x7f0000000900)=0x14) socketpair(0x11, 0x1, 0x1, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r12, &(0x7f0000000980)="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", 0x1000, 0x8000000, &(0x7f0000001980)={0x2, 0x4e23, @remote}, 0x10) 16:09:36 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x2112, r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/155) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x0, 0x0, 0x3}}, 0x14) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='/selinux/policy\x00', r3}, 0x10) ppoll(&(0x7f0000000300)=[{r2, 0x80}], 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)={0x80}, 0x8) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000003c0)=0x7, 0x4) fcntl$getflags(r1, 0xb) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x84400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'bcsh0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000480)={@empty, 0x71, r5}) write$P9_RSYMLINK(r3, &(0x7f00000004c0)={0x14, 0x11, 0x2, {0xa36167fd01a58131, 0x0, 0x7}}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@local}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='limits\x00') write$P9_RSTATFS(r6, &(0x7f0000000680)={0x43, 0x9, 0x2, {0x6, 0x9b, 0x401, 0x0, 0x361, 0x6, 0xa3, 0x30ce, 0x6}}, 0x43) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x200000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x0, {{0x2, 0x4e24, @multicast2}}}, 0x88) accept4$packet(r4, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f40)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001f80)={'team0\x00', r8}) ioctl$RTC_VL_CLR(r4, 0x7014) r9 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r9, 0xffffffffffffff98, &(0x7f0000001fc0)={0x5, 0x1b71d6bf, 0x7ff}) r10 = open$dir(&(0x7f0000002040)='./file0\x00', 0x711000, 0x1) r11 = openat$null(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/null\x00', 0x104c0, 0x0) renameat2(r10, &(0x7f0000002080)='./file0\x00', r11, &(0x7f0000002100)='./file0\x00', 0x5) 16:09:36 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x80080) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000080)=""/224) r3 = syz_open_pts(0xffffffffffffffff, 0x141800) ioctl$KDSETLED(r3, 0x4b32, 0xfffffffffffffe01) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/152) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'nr0\x00', @remote}) r4 = pidfd_open(0xffffffffffffffff, 0x0) r5 = dup3(r3, r4, 0x80000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000280)=0x10000) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20000) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) lseek(r6, 0x9, 0x2) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x4000, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1ac, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb77}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffe0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x92}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x91ab}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$KDGKBENT(r11, 0x4b46, &(0x7f0000000800)={0x2, 0x81, 0x3}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x4000) epoll_wait(r12, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x6, 0x5) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0xe8) r15 = getgid() fchown(r13, r14, r15) [ 143.736248] audit: type=1400 audit(1573142976.889:8): avc: denied { map } for pid=1842 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5044 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 16:09:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="76bf9448837f2167b95eb988ddbf835b"}, &(0x7f0000000080)=0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000001a40), 0x0) r2 = socket(0x0, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x35fc5f25) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0x35fc5f25) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev}, @IFLA_IPTUN_FLOWINFO={0x8}], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x58}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x80, 0x80000) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r10, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="98da760000000000000000"], 0x20}}, 0x0) r12 = socket(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="76bf9448837f2167b95eb988ddbf835b"}, &(0x7f0000000080)=0x20) getsockopt$inet_mreqn(r12, 0x0, 0x0, 0x0, 0x0) r13 = socket(0xa, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="76bf9448837f2167b95eb988ddbf835b"}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 146.797157] audit: type=1400 audit(1573142979.949:9): avc: denied { syslog } for pid=2744 comm="syz-executor.5" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 16:09:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd8d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 146.887440] EXT4-fs (loop0): Can't read superblock on 2nd try 16:09:40 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000072c000/0x1000)=nil) r1 = creat(&(0x7f0000001600)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) r4 = socket$inet6(0xa, 0x100000003, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f00000001c0)={0x3}) sendto$inet6(r4, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000500)={0x7, 0x4b, 0x2}, 0x7) write$binfmt_misc(r0, 0x0, 0xe63d0647d8ac038e) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x25}, 0x0, 0x4, 0x200, 0x400}) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="2f6465762f6e756c6c62300072930ca6d01b083345fcc7b88b165e421b85fa112a875e23c39c8e0b34c91beb561b63722a87a74b87c99c507939bb0b742d6642728586960d38718d153537008cb1b3ce86fa73552bc5ce8f0a1cce0e4e163409"], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x1000000, &(0x7f0000000340)='/selinux/mls\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r9, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r6, 0x0}]) r10 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000200)=0x1) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000400)) pipe(&(0x7f0000000680)={0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, &(0x7f0000000240)=0xffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) [ 147.001096] audit: type=1400 audit(1573142980.159:10): avc: denied { create } for pid=2784 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 147.019644] hrtimer: interrupt took 31139 ns 16:09:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004044, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) [ 147.087547] audit: type=1400 audit(1573142980.159:11): avc: denied { write } for pid=2784 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:09:40 executing program 4: r0 = socket$inet6(0xa, 0x803, 0xa5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x1, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440), 0x400000000000258, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fcntl$setpipe(r7, 0x407, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:09:40 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @empty, {[@rr={0x7, 0xb, 0x8, [@multicast2, @local]}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '=qE', 0x0, '_N0'}}}}}}, 0x0) 16:09:40 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgid(r0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, r1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141a42, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xac, 0x3, 0x2, 0xe1, 0x0, 0x88, 0x800, 0xd60587a961e00dce, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x5aae}, 0x40, 0x67, 0x7, 0x4, 0x32, 0xfe, 0x5}, 0xffffffffffffffff, 0xf, r2, 0x8) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x4e, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fallocate(r2, 0x0, 0x0, 0x10000101) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 147.246078] audit: type=1400 audit(1573142980.159:12): avc: denied { read } for pid=2777 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:09:40 executing program 1: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x17, 0x3, @thr={&(0x7f0000000140)="0b01f7f957ec3c9d469504bfaf95ae3767cd97f6e2a41eb31a2b23936427279bc6ab7ef6b699989764555fbb566a07ac594a0a11a275181de287d3ea385986d35781c20e08cdfa0ee54fc36b0d7dd36ffa96bb532af5d84372d7d1fa", &(0x7f0000000200)="373f393550c9f45095c1d3e02db9d785cfa017cf283864b0d8fbde67a0b54634839028cffd6b2e8ff73425312e46e4986faf2cd0d894eb1eeeb91a787036f8ba27e44466d6ccec4bb9064aeb6ffffa3eda"}}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') ioctl$TIOCPKT(r2, 0x5420, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x20800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={r7, r2, 0x13, 0x2}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'irlan0\x00', {0x2, 0x4e24, @local}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r9, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x28) getdents64(r8, &(0x7f00000045c0)=""/4087, 0xff7) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) setpgid(0x0, r10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xb7a, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xfffffffd, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0x5, 0xfff, 0x400}, &(0x7f0000000200)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=0xfffffffffffffff8}}, 0x10) timer_create(0x4, &(0x7f0000000480)={0x0, 0x1c, 0x1, @thr={&(0x7f0000000380)="a1435a8257c79707818f1e002c6e780aa6749f5b8254c54dbf4a33edf59592504dc246d24f8fe286466866fb80603c5db58be79818565e9d80797621ede7b8cfb1cb3d159d1ebaa58861310bc3a3a50cd1555cf5fd1807942abe104f4d5cdeaf4bf70baae5e19e037a186cf39116336d42edf30d37644523b7ec15ce1b87e7711bc7a752b76e9f2c284226d9aa4a9e33feb8519113ecf4a4f1d0f6b83ebe657e21735f9540e7253f22a7d0c5dff203a7288e645e86f639c032ce6d3b407cf1cda8348b71b2db2306477f9dbfbaa145c3e19234f84170eb51abce", &(0x7f0000000080)="838d5b90bbbf"}}, &(0x7f00000004c0)) 16:09:40 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x1ef) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ptrace(0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getgid() 16:09:40 executing program 5: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='asymmetric\x00', &(0x7f0000000840)={'syz', 0x3}, 0xfffffffffffffffd, r0) r1 = add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="ce59e7c05f84e1f3ded3eec1b76d64e09867117988388d3defd68d2688606650496a61c68fa9f02f948f3fdcd14ed0b0ee3be111aa55", 0x36, r0) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='(:#\x00', r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)=""/7, &(0x7f0000000300)=0x7) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='./file0\x00') write$9p(r3, &(0x7f0000001400)="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", 0x600) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) write$P9_RFLUSH(r5, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000440)) r6 = socket(0x0, 0x2, 0xc) write(r6, &(0x7f0000000080)="1f0000000104fffffd3b000007110600f30501000b000600020423ca0000cf", 0xcc) gettid() syz_open_procfs(0x0, &(0x7f0000000900)='map_files\x00') sendfile(r3, r4, 0x0, 0x10000) [ 147.415062] audit: type=1400 audit(1573142980.209:13): avc: denied { setattr } for pid=2781 comm="syz-executor.4" name="current" dev="proc" ino=8161 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 147.440243] SELinux: policydb string length 309884270 does not match expected length 8 [ 147.499776] SELinux: failed to load policy 16:09:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x2000}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 16:09:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001e008d0500000000000000000000000000000001000000200000000000000000000000000000000000000000000000000000000003000b0000000000"], 0x48}}, 0x0) 16:09:40 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}, 0x80, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffd934aa54cdfc17009c37dfb755c6d450726f13c9f79a076b92e304fcffffffefffffff0000000000001ba03e76278832abc913ce"], 0x1d) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) rt_sigsuspend(&(0x7f0000000140), 0x8) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000005c0)="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") r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x800000) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r4, &(0x7f00000017c0), 0x315, 0x800000) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000200)) stat(&(0x7f0000000fc0)='./file0/bus\x00', &(0x7f00000009c0)) getresgid(0x0, &(0x7f0000000580), &(0x7f0000000a40)) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000b40)=0x1c, 0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xd7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xde6, 0x0, 0x8001, 0xc9}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xd7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0xde6, 0x0, 0x8001, 0xc9}, 'syz0\x00'}) dup(r6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xd7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x4) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xd7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0xde6, 0x0, 0x8001, 0xc9}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(r8, 0x4004556a, 0x4) syz_open_procfs(0x0, &(0x7f0000000b80)='net/ip6_mr_vif\x00') syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xd7]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0xde6, 0x0, 0x8001, 0xc9}, 'syz0\x00'}) fcntl$getownex(r9, 0x10, &(0x7f0000000bc0)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) keyctl$get_persistent(0x16, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@local}}, {{@in6=@initdev}}}, 0x0) r12 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x32ac1e28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = openat$cgroup(r12, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) fstat(r13, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400020000", @ANYBLOB="d9999e731c923d64394815cf1706244d99aff54ec8fd02c6bf889887d056d0c77346a4ef9e14eed0465ee1d2d0aa666168b0fe91f1ddf25701a66e99e4198d57eace", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\b\x00', @ANYRES32=r14, @ANYBLOB="100003"], 0x11, 0x1) r15 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r15, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_SNDBIT(r15, 0x4004556a, 0x4) r16 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r16, 0x405c5503, &(0x7f0000000100)={{0xde6, 0x0, 0x0, 0xc9}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(r16, 0x4004556a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r17, &(0x7f00000017c0), 0x315, 0x800000) r18 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r18, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_SNDBIT(r18, 0x4004556a, 0x4) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c40)='cgroup.subtree_control\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) setpgid(0x0, 0x0) getresuid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)) 16:09:40 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="9eaa07010000010849247112814f19249fd31a02cf6c007a"], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1692820, &(0x7f0000000000)={[{@stripe={'stripe'}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) r5 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x0, 0xdc87a26aa048792c, 0xffffffff}}) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x9, 0x2, 0x8, 0x401, 0x0, 0x800, 0xfffffffffffffffd, 0x663, 0x3}}, 0x43) 16:09:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4b33414b70050b0a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) keyctl$get_persistent(0x16, r3, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) creat(0x0, 0xfffffffffffffffe) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10) listen(r4, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000010000000000000002000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x1c}, 0x0) r5 = socket(0x10, 0x80000000000802, 0x0) write(r5, &(0x7f00000003c0)="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", 0xfc) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 16:09:41 executing program 2: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) get_thread_area(&(0x7f0000007d40)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b1b5d2f3ead6cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xbe, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) socket$inet(0x2, 0x3, 0x1f) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000004a005f0214f90707000904000a00"/28, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x61, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000300)="4825dd649c20f22973738b60f6f73b117f5ba3515087bcbad9e2b9b9c840df5a5b2539b247aab0bc57a8bca606f75378c80cdebd8b43c17dd6e3698a80d99469e6c9fa1761d0997d20c4e6ff918457978fbfc657467c2a202887d14e68774a8a8fb624e78ed643d3b9dcfe7ca24cf5b88008b3fd10551063b97e1c5fe494c09059fe71fe133aac60e86a4ad0fcf8557ee21cdc5250c0f66af1291a57f3d2d652a6e834812126c3fde69ef1fea0fba33b1d6ce5c68f31a2f6c87f5758817d95306dfe83049bdc36ee815bef6e32", 0xcd) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) r6 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSBRK(r6, 0x5409, 0xd0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setitimer(0x1, &(0x7f0000000280), 0x0) 16:09:41 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x3a) lseek(r2, 0x800002, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) io_submit(r5, 0x0, &(0x7f0000000540)) 16:09:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a143, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd0\xb8\xde\xf6\x8153\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xfb\x92\xd9\x0f\x8b\xc8A\xc8\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mq\xc7\x00\x00\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/251) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x1f}, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) syz_open_procfs(r3, &(0x7f0000000300)='fd/3\x00') r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000640)=0x482) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r7 = memfd_create(0x0, 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, &(0x7f00000001c0), 0x20002000005) pwritev(r5, 0x0, 0x0, 0x101) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x184d01, 0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r12, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r9, 0x0}]) r13 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r13, 0x0, 0x28, &(0x7f0000000100)={@multicast1, @broadcast}, &(0x7f0000000140)=0xc) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000440)={0x7, 0x9, 0x3, 0x101, 0x1b, 0x0, 0x76, 0x8, 0x4, 0x5}) sendfile(r2, r0, 0x0, 0x1ff) 16:09:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) syncfs(r0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1a, &(0x7f0000000000)=0x9, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x10000) [ 148.414873] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.424474] PF_BRIDGE: RTM_DELNEIGH with unknown ifindex 16:09:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a143, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd0\xb8\xde\xf6\x8153\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xfb\x92\xd9\x0f\x8b\xc8A\xc8\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mq\xc7\x00\x00\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/251) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x1f}, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) syz_open_procfs(r3, &(0x7f0000000300)='fd/3\x00') r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000640)=0x482) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r7 = memfd_create(0x0, 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, &(0x7f00000001c0), 0x20002000005) pwritev(r5, 0x0, 0x0, 0x101) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x184d01, 0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r12, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r9, 0x0}]) r13 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r13, 0x0, 0x28, &(0x7f0000000100)={@multicast1, @broadcast}, &(0x7f0000000140)=0xc) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000440)={0x7, 0x9, 0x3, 0x101, 0x1b, 0x0, 0x76, 0x8, 0x4, 0x5}) sendfile(r2, r0, 0x0, 0x1ff) 16:09:41 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgrp(r0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x1e, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r4, 0x1acdb000) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 16:09:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_int(r0, 0x107, 0x40000000011, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x220000, 0x20) accept$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) 16:09:41 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/\xe0\x03\x00\x00\x00\x00\x00\x01\x01\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) r4 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x28, 0x38, 0x16, 0x11, 0x0, 0xaff1, 0x1, 0xe}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa000000009078ac7014bbac1414000502907800000200450000002d0000ac1414aaac1e00015b627ec0f7ead86000"/70], 0x0) 16:09:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a143, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd0\xb8\xde\xf6\x8153\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xfb\x92\xd9\x0f\x8b\xc8A\xc8\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mq\xc7\x00\x00\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/251) r3 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x1f}, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) syz_open_procfs(r3, &(0x7f0000000300)='fd/3\x00') r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000640)=0x482) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r7 = memfd_create(0x0, 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, &(0x7f00000001c0), 0x20002000005) pwritev(r5, 0x0, 0x0, 0x101) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x184d01, 0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r12, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r9, 0x0}]) r13 = dup3(r10, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r13, 0x0, 0x28, &(0x7f0000000100)={@multicast1, @broadcast}, &(0x7f0000000140)=0xc) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000440)={0x7, 0x9, 0x3, 0x101, 0x1b, 0x0, 0x76, 0x8, 0x4, 0x5}) sendfile(r2, r0, 0x0, 0x1ff) 16:09:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 16:09:41 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x8101, 0x0) tee(r2, 0xffffffffffffffff, 0x6, 0xc) ioctl$FICLONE(r0, 0x40049409, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000000)={0x4, 0x3, 0x530a000}) perf_event_open(0x0, 0x0, 0x0, r0, 0x1b) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) timerfd_gettime(r7, &(0x7f00000000c0)) sendto$inet(r8, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r8, &(0x7f00000009c0)=ANY=[], 0x378) recvmmsg(r8, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) write$binfmt_misc(r8, &(0x7f0000000100)={'syz1'}, 0x4) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r9, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) write$binfmt_aout(r2, &(0x7f0000000900)={{0x108, 0x3, 0x1, 0x231, 0x390, 0x66c, 0x13b, 0xfffffffc}, "23db198d0d5934ff49c41f6a40bc17f7e3e60eecc32c67c65d0c71998160b9128023b72d830121e715e6cbafe858fa5eb4ce53fe5ffdd8d89f73414fff222e201e9d64cc5883311b3299d85650915895a266d08d6e1796d1b4dc28de77926fa70186e1ff9894", [[], [], [], [], [], [], []]}, 0x786) 16:09:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x1}}, 0x4c88a) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10099b7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000000)=0x73ab069d, 0x4) setsockopt(r8, 0x10e, 0xb, &(0x7f0000000240)="75cc11ec", 0x4) sendmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="23000000250007041dfffd946f610500020000001f00000000000800050016000400ff", 0x23}], 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xd) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYRESOCT=0x0], 0x3}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffc1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x76a348191dddcab}, 0x80) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x9c, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb4a6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x3b58}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2e}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x140208b0) sendfile(r0, r2, 0x0, 0x3) [ 149.104719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2967 comm=syz-executor.1 [ 149.180515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2975 comm=syz-executor.1 16:09:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0xb8681e684922c83c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16:09:42 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4080000000000003c000000000000001f000408000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x28) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) r4 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r8, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}]) dup3(r6, r7, 0x0) sendfile(r7, r1, &(0x7f0000001540)=0x4, 0x441) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f00000014c0)={0x0, 0x989680}, &(0x7f0000001500)) sched_getattr(r4, &(0x7f0000000380)={0x30}, 0x30, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r9, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r13, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r10, 0x0}]) r14 = dup3(r11, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) dup3(r2, r3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x0, r4}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) sendto(r2, &(0x7f0000000100)="ae732af48dcae1f5517335792c0167bf9f3936d25fa7e237434d365c8b773709993b2d0e32ddbc41dff3d1f406948c76414dc784801716ab0b67312a030e54b5f44b4f3c14a7b017cfec8c792919c06c604d9d7200399816c5174b2e82e9912e729e2c87e6803653a460129900e3bd76bbc935bc0bfb890578756b09dc5e2fb3325487e24a10564c033d51d8528f8c7ffb7b6a6eaab601abb0ffb2a7ab4215aa62db327f2ee03cf282f85aaa56c5bbb29996c852546cf442fe5b43736c4f25906ae6", 0x2fd, 0x57f04999b5d5715d, &(0x7f0000000040)=@nl=@unspec, 0x80) 16:09:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000480)={0x297}, 0x5675536604875ab8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xfffffffffffffff6) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x20}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000002c0)=0x4) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1, 0x5, 0x0) removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)=@known='system.advise\x00') r4 = epoll_create1(0xc0000) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180), &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000000)) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x5, 0x0) fcntl$dupfd(r5, 0x0, r2) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) 16:09:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace(0x10, r0) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='net/ip_tables_targets\x00') ioctl$RTC_WIE_ON(r1, 0x700f) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000100)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, &(0x7f00000001c0), 0x8, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x101, 0x0, 0x6f25, 0x8001}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) fstat(r2, &(0x7f00000004c0)) chdir(&(0x7f0000000200)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r8, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}]) r9 = dup3(r6, r7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r13, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r10, 0x0}]) r14 = dup3(r11, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000300)=0xc) fallocate(r4, 0x0, 0x0, 0x110001) 16:09:42 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@fat=@nocase='nocase'}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x0, &(0x7f0000000080)) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) [ 149.260495] audit: type=1400 audit(1573142982.409:14): avc: denied { prog_load } for pid=2991 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 149.323595] FAT-fs (loop1): bogus number of reserved sectors [ 149.334056] FAT-fs (loop1): Can't find a valid FAT filesystem 16:09:42 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x102) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={0x0}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) get_thread_area(&(0x7f0000000080)={0x6, 0x20001000, 0xffffffffffff41ff, 0x0, 0x0, 0x0, 0x1}) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) lstat(&(0x7f0000000300)='./file1/file0\x00', 0x0) poll(0x0, 0x0, 0xffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1/file0\x00', 0xfdb3b357f9f51439) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) recvfrom$unix(r2, &(0x7f0000000240)=""/190, 0xbe, 0x80, &(0x7f0000000000)=@file={0x1, './file1/file0\x00'}, 0x6e) pipe2(0x0, 0x4000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) 16:09:42 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x2}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r6, 0x300, 0x0, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}}, 0x2080) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r7, 0x0, 0xffffffffffffff13) connect$inet(r8, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @rand_addr=0x401}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x800}) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='bond0\x00', 0x10) unshare(0x60000000) prctl$PR_GET_FP_MODE(0x2e) write$eventfd(r4, &(0x7f0000000040)=0x6, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="148120024700000700254d06000004287ad67eca260f884a30e0e5e66bb543bf76a028e6a6128d064398497c2ed91abd88d04031a5a90ab5c887c859f8c7a8d291ca8fc0d4a38cfa65daa3d01a8d13382eea57f988549391b8c3426354159131dec642a68470e88dbb83a3c3351fb9c735fa307293c08e2edecb16b30444d002b10b042fe84d4986eb4adabca89c8fe9048bb6a6c4111ec7d12ee418b5e5a82370afcdf062fdc3acf67014ec08ad93ac738d2d3a44d463ad5aab8bb23f5a1f71148e3191b7e6611ad26d244d22d48a2b7865b20c4026bdcd7f546162b16ec9fceea629"], 0x12) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x308, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000010005, 0x0) 16:09:42 executing program 0: clone(0x23015000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15bb4c70f5c4677f30ed8c8d0800000000000000ac1c60455a77c9545f12a29c882cc2fb5eef125c03e7137b74cca03b0b2c2c") prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000002, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x659d2369f0013242) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x10) dup(0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0xa80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendmsg$key(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="0200d6022100000097000000ffdbdf25070019000000000002004e217f00000100120000000000000a004e2200000000fe8000000000000000000000000000bb0300000000000000030006002b90000002004e24e000000200000000000000001400180000989400ae7118294766b0830ae4bdd7146bada017e072fa23557ae214f9ca4c17a8a5df5d892bd7cea2fa49790cafc060b517661ca2a84be69a55ca9e729f91bb866478dcd27d74b274c0a62a3cddd74b8db7999db4d50f5b8254202b8fd53ccb87b31b605422da29dd09929ac5dfee9e0a2e34179eebabaad4e6088a219704e04d4ccf4ba39f70a8ddb9a5e2e63de7facc9a2fcaa0e97d00000000010024094e61000016abab4820245c4016b4b4ae8acc22ffb2d896be63b4caf6833bf670d2dc609b4d97434d45f18ccdd80a281ec85b3089e1a3b16f7a4859012a7279989754c6cd640e10440fd6c0f2b3c8c7e3e6ac094e624e4cc049457eddedd9b87dc968791e5f64b4cd32954e930789c3e478eb95f0ce355665c6f96e3f3a8c76d1f54f577592e92e0428e82983de705cb011365e7809d081ffe873c210cb8fdc203b7524a0cfbce726ac2185cdf6ff97cb4a364106af5e1934c12435b88d69519b93cf9282f0c859d01b2c280423143c368641466927dc47a5a359c5ee332cec8826a31ac28445b52be67e8f0cd7f60426"], 0x108}}, 0x8010) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) timerfd_gettime(r6, &(0x7f0000000400)) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f00000000c0)={0x0, 0x24, 0x0, 0x0, "ffd25ae76481000000000000001b2c5c86db7b92a10a88390def41dff7c94500"}) [ 149.569266] FAT-fs (loop1): bogus number of reserved sectors [ 149.576496] FAT-fs (loop1): Can't find a valid FAT filesystem 16:09:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0xb8681e684922c83c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16:09:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) r5 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000200)={'lapb0\x00'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030302c6d6f64653d30303030303030303030303030303030303030303230302c6d6f64653d30303030303030303030303030303030303030373737372c2d6f64653d30303030303030303030303033373737373737373737372c6d6fd6653d30303030303030303030303030303030303030303030302c6d6f64653d30303030303030303030303030303030303030303030312c646566636f6e746578743d757365725f752c00b0a3e4353e652d870d9ac5c2d4a947"]) ptrace(0x10, r0) keyctl$get_security(0x11, 0x0, &(0x7f00000002c0)=""/182, 0xb6) wait4(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000001fc0)) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc0045878, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000003c0)) times(&(0x7f00000001c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40, 0x2) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 16:09:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r7, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}]) r8 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup3(r1, r8, 0x80000) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x102, 0x0, @empty}, 0x1c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000480)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0x337) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@mcast1, 0x4d, r12}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$inet6(0xa, 0x400000000001, 0x0) close(r13) r14 = socket(0x11, 0x800000003, 0x81) bind(r14, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r15 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r15, 0x2008002) write$P9_RGETATTR(r15, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20a, 0x9, 0x0, 0x8, 0x1fffc000000, 0x0, 0xc1}}, 0xa0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) sendfile(r13, r15, 0x0, 0x200fff) syz_genetlink_get_family_id$tipc(0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/125, 0x26d) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') getdents64(r16, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) r17 = socket(0x10, 0x3, 0x0) r18 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') sendfile(r17, r18, 0x0, 0x1000000000e6) r19 = openat(r18, &(0x7f0000000340)='./bus\x00', 0x0, 0x4) ioctl$ASHMEM_GET_NAME(r19, 0x81007702, &(0x7f00000007c0)=""/150) 16:09:43 executing program 0: clone(0x23015000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15bb4c70f5c4677f30ed8c8d0800000000000000ac1c60455a77c9545f12a29c882cc2fb5eef125c03e7137b74cca03b0b2c2c") prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000002, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x659d2369f0013242) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x10) dup(0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0xa80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendmsg$key(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x108}}, 0x8010) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) timerfd_gettime(r6, &(0x7f0000000400)) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f00000000c0)={0x0, 0x24, 0x0, 0x0, "ffd25ae76481000000000000001b2c5c86db7b92a10a88390def41dff7c94500"}) [ 150.073071] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22 16:09:43 executing program 0: clone(0x23015000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="a0de925b340900c8b7b5a53a69912fab0cb346f6699b64996c84c99223b5c19e54974eb4ec92a3b0454ceb68c0e6f7410adc9f6facd3f795dfbc8d42a45c252a761a042ab2f86f4965c8d42d1239bf00644868dd927f34ca15bb4c70f5c4677f30ed8c8d0800000000000000ac1c60455a77c9545f12a29c882cc2fb5eef125c03e7137b74cca03b0b2c2c") prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000002, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x659d2369f0013242) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0xf56f, 0x0, 0x200, 0x0, 0x801}, 0x0, 0x800000000000000, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x10) dup(0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0xa80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendmsg$key(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x108}}, 0x8010) creat(&(0x7f00000003c0)='./file0\x00', 0x100) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) timerfd_gettime(r6, &(0x7f0000000400)) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f00000000c0)={0x0, 0x24, 0x0, 0x0, "ffd25ae76481000000000000001b2c5c86db7b92a10a88390def41dff7c94500"}) 16:09:43 executing program 2: socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'tunl0\x00', 0x4fff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) creat(0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x80) syz_open_dev$sndtimer(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x80) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) writev(r5, &(0x7f00000003c0), 0x63) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x81207be49fc734d5}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000029bd7000fbdbdf25010400000000000002000000000000000664703a73797a32000000009c1cdbdff28cd71a1340c16b6901d454b814698c8b96d4d31fb6a6d65de9387308df45a73757abd502a0529aa154c014074a"], 0x2c}}, 0x8001) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 150.381274] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22 [ 150.671644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=3058 comm=syz-executor.3 16:09:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0xb8681e684922c83c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16:09:44 executing program 0: r0 = socket(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0xffffffff, 0x7}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), 0x0, 0xfffffffffffffffd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000200)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000240)={{0x77359400}}, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000340)={0x400, 0x9, 0x0, 0x5, 0xa4}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000006c0)={0x3, {{0xa, 0x4e20, 0x0, @loopback, 0xffff}}}, 0xff22) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="1c8efc237269747900000065ad0c6b0000000080ff7f000000000000000000000e0035cc79a31d88e2f87ce7605e4c000004000000000000000007000076cbff00020000380b0000380300003803000000f0ffffffffbfff00000000922936c59fbd090c2703a3641b0d6749088636d6505b56eaeb850d09e5ebc5113299c5b9870ee8d271c889fe127bdd9a8248e6b7695a3baa816c184cd59eecd9656ca3fa49e0c1265a0300cc", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"], @ANYBLOB="ac141429ac1e010100000000ffffff006e6c6d6f6e3000000000000000000000726f7365300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002f0004200000000000000000000000000000080148010000000000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000080330050000000000000000000000004000736574000000000000000000000000000000000000000000000000000000050000000800000000020000010000000000000009000000090000006007000040004c4f470000000000000000000000000000000000000000000000000000007f109a4a61ff2736432a9ed45354f949aaaf7a7395fd994a0223ae1b2de20cc700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa2108000c0035000e002900190026001f00080035002a001a000a0029001a0006001600250000000000000020000000ff0100000000000000000007e0000001ffffff0000000000697036746e6c30000000000000000000687773696d30000000000000000000e68a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e0001230000000000000000000000000000c800f8000000000000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000110900030100000000000000000000003000534554000000000000000000000000000000000000000000000000000002faff0b03dffb02c20200000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000feffffff00000000a9f943b0ba38e5f2ce06de80847fe3aa4346e94a3add16409cad0c59f2e12fc381326a077fc52905c71c917985ea3c55fd2235876e73e86bf430b07ac9aa6b8dd9a26fd1d754ebbb6a4cba0cdbc06928d9f4e40e1455429a78c8e0416856ac4e19a3cd9bacaf949ad429c99168ce4186fa5daba6361750d2e9f0f6ae4ec41d3c04627e8839c78c69d3710783edd7e2c7af2dc871b51b51429ac3a1df62e7c0d81dfd2670b0e03e13735ca21cdc8b9a6bc9f250fff0d39c835249583bb6c3ab76219c8f58972047d260c69400a1f1568bd33bc021f6b8d4e2"], 0x3) getsockopt$inet6_buf(r2, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) socket(0x2, 0x4, 0x9) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r5, 0x80003) sendfile(r2, r5, &(0x7f00000000c0), 0x8000fffffffe) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xffff, 0x900) 16:09:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) timerfd_create(0x8a21bc8bb2eecc07, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r7, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0}]) r8 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x180}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r9, 0x0, 0x30005, 0x0) io_setup(0xb, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 16:09:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0xb8681e684922c83c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16:09:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) geteuid() fstat(0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)={0x3}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = add_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="01eac8f001604ef24abc3baa0080e5469c6fccf32f5c47e8476880870f24911d76166fd160481cc336c229928b2a689118ef967a0fb32986cd4590406475a3986893a299b2879ed07c13ada0", 0x4c, r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000340)='/dev/loop-control\x00', &(0x7f0000000380)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') write$smack_current(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x3b, 0x37, 0x1, {0x0, 0xe7a8, 0x10000, 0x0, 0x1d, 'cpusetusernodev]keyringloproc'}}, 0x3b) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90600, 0x0) set_tid_address(&(0x7f0000000140)) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000480)={@mcast1, @rand_addr="d78ec2faaa416e34a49ff7b8d3e02cf4", @remote, 0xfc5, 0x6, 0xd8, 0x100, 0xc4, 0x80000002}) 16:09:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) r5 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000040)=0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ppoll(&(0x7f00000000c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) 16:09:44 executing program 5: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1, 0x0, [], r0}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x20000000003) 16:09:44 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'\x8dyz', 0x0}, &(0x7f0000000440)="737a0af0b307aa858303726b04eb7421985cb537abdfda44e549da8a2683ab7966daf167f01afed12db55865e0d66744c3fffbd76ea95f334304f1a7892f2aa581d62fca4c690bbad00ccb96e10767a357d3e704ef7a25b3b109acec0e291d690cd33717321f09c973b749f5c0b393927a3cb6df9ec7a3cfb1c07f18177a7076facf74f4ef38117ba1635c1559df92c48c770e1f1f5157358726c56d63c17675154dac87aa2f4df3cc2f6269066128c5bcaa039d56b786a9d8df85bc2404ecf168374310bb778d9f31cb605530", 0xcd, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) r1 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="a9a5e668afbd3d2ecd34bd8be7640d", 0xf, 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x5, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r4, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) [ 151.624286] audit: type=1400 audit(1573142984.779:15): avc: denied { block_suspend } for pid=3130 comm="syz-executor.4" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 16:09:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe(&(0x7f00000004c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x1, "f3"}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) setpgid(r7, 0xffffffffffffffff) r8 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 151.673172] input: syz1 as /devices/virtual/input/input16 16:09:44 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) getgroups(0x1, &(0x7f0000000800)=[0x0]) add_key(0x0, 0x0, &(0x7f0000002040)='\t', 0x1, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000001c0)={0x18, 0x5, 0x0, 0x9, 0x7}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x2, 0xb0]) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4200, 0x400, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 151.723380] EXT4-fs warning (device sda1): ext4_group_add:1615: No reserved GDT blocks, can't resize 16:09:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c785255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56", @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4514100010129a741efca44f91dd0492482ba837296c4b77597cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eec"], 0x0, 0x79}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:09:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x2000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) inotify_init1(0x800) r5 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000000240)="0de4c7c4df1839cf6b12b06c36591e05484f071423f4700e39db41645090230e6d9451740e2433db13ef00c6f0e9d7e700e80d969f9a0dcfccf49bc1a1fdc9de024b41d33554173172820b028aeaa76d6091d721e38d6eea8ff013d71cc1e002591a13c6a19bc39f57947259900a653cb142cbce783359cd0afd2f813c3ae0390f7fe4e4d4f933e908bd9903de6e499f2fb18002d06f5ff9d69ccf13a64ba9b71224f8b9b80f92c534acf560773d387543e51c3199d1698405dc52b7ec22a6cc77a850ece8010fb4a6495954acf14539b2cbd9edcce537a5566c3cebbc1ee02b", 0xffffffffffffffea, 0x1}, {&(0x7f0000000340)="3cc2398d96a4a8132cd0f05f8c5da48dea4317db362ec233cb7bbffd578d8fef640be724315285ccfa02dc11973bb66b44a7df6b38e4b6ab8ea3a81ffd99b0e9c365a820f2769734a9d0f82ba6bbb9a42fcf18514bff32ca367dfe060bd51a4403d04ea9a33ba139d498e9ffe356301c149916a09e7bbac90844cb0196837cf5a1b0d59ae33b69abf30cf8c5a22f8bc2489d672671780762601317421897d26b13f04c585faba484de528e6885f8aa33", 0xb0, 0x234c}, {&(0x7f0000000400)="c8fdad1fdfe82d5d05c418b20e383d60eda8ebfed3da398e469647c63f58cf673dc5cabde13cd8e48ca45473853f189e17714d2047e88f6d88798498d1a66a2baf422c933d82c0223ad225", 0x4b, 0x1}], 0x8000, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlateno='uni_xlate=0'}, {@iocharset={'iocharset', 0x3d, '\xbcW\x93{\x10\x8b\xb7\xb2ian'}}, {@shortname_lower='shortname=lower'}], [{@measure='measure'}, {@appraise_type='appraise_type=imasig'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_gt={'euid>'}}, {@hash='hash'}]}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x3c, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e24, 0x4, 'sed\x00', 0x24, 0x7f, 0x2c}, 0x2c) 16:09:45 executing program 3: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x52a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000340)='/dev/net/tun\x00'], &(0x7f0000000640)=[&(0x7f00000003c0)='vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', &(0x7f0000000400)='/dev/net/tun\x00', &(0x7f0000000440)='vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', &(0x7f0000000480)=',em1$]securityppp1wlan1+\x00', &(0x7f00000004c0)='/dev/net/tun\x00', &(0x7f0000000500)='vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', &(0x7f0000000540)='vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', &(0x7f0000000580)='/dev/net/tun\x00', &(0x7f00000005c0)='/dev/net/tun\x00', &(0x7f0000000600)='vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00']) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x17d) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28008788000100001a00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) 16:09:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef82b6734e5a38b13b2a46b2896069e668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc92051a5b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6b2bcdceb6b7fb4fccbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket(0x2, 0x1, 0x81) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:09:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000003440)='J', 0x1}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r6, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r7 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getdents64(r7, &(0x7f00000001c0)=""/151, 0x97) [ 152.100430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pig=3174 comm=syz-executor.3 16:09:45 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) getgroups(0x1, &(0x7f0000000800)=[0x0]) add_key(0x0, 0x0, &(0x7f0000002040)='\t', 0x1, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000001c0)={0x18, 0x5, 0x0, 0x9, 0x7}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x2, 0xb0]) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4200, 0x400, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 16:09:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@mcast1, @mcast2, @local, 0xfffffce4, 0xce, 0x80, 0x400, 0xfcef, 0x81820050}) 16:09:45 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b1b5d2f3ead6cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x0, 0xff, 0xfa2265ac71d467d3}, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x0, [], "5b2625fa1756738b9014a5e2c2ec885f"}) poll(0x0, 0x0, 0xffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r1 = socket$inet(0x10, 0x10000000003, 0x9) r2 = dup2(r1, r1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000001c0)=""/185) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0xd339}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") [ 152.609756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:09:45 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x830800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) r6 = dup3(r3, r4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x400000, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x36b88cce8255dce9, 0xfffffffffffffcb6) r7 = getpid() rt_tgsigqueueinfo(r7, r0, 0x16, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r11, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r8, 0x0}]) r12 = dup3(r9, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) fcntl$F_SET_FILE_RW_HINT(r12, 0x40e, &(0x7f0000000200)=0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4205, r7, 0x203, &(0x7f0000000080)={0x0, 0xbc}) 16:09:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) time(&(0x7f0000000000)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) r4 = creat(0x0, 0xaf) r5 = fcntl$getown(r1, 0x9) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f00000000c0)='syz1\x00') sched_setattr(r5, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x5, 0x5, 0x80000001, 0x8, 0x4}, 0x0) 16:09:46 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)="45ea00abfb88b6b6706951e89b1e06db3f40ccb7c392a3797ff19d985ee79e98036808d0ad5cd59733e5b38ebca7b2cf197056ff4452faab91b1e23ec033bda18d0e89c6e5054f0b958a6934f703fd3a3885b7586852812f79903122946b2670ba92e1a82ade39b013b2f61e52ba158f3b393f9f1a7e6b2ec1be057b64a06a09684ee858f145a16b78") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="6d0518f873b82568de7940c345cd359a4e7199c8a887cd86762248cc5c3c5f939063f5f21ec83911f06e653845ed8483d21ea431f47291601c5e1853299b58d8c13ba8015a1a3935e5440c74e0c94df6c3df64492a7345e3f668a1fc847cda41d2e9899a325cf90fd794338c8eef19242c3c6c10ddd024a4cbd0d637bfb7bfb09736432745800c44436b340d05685ec1e4a3c18e14a87b236ffb1de6aa42114f606a9da0c9195ccbf898e870d868905695b67ec09f5428a565bb64f0b37477a0139c73b318ab38f14fff5120fec5432a8b9d7ab0491f044782938add3e713fbac993d3c6fa1a") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000380)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r7, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}]) r8 = dup3(r4, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8943, &(0x7f00000001c0)='system\x00') 16:09:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r4, &(0x7f0000000200), 0x0) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='a', 0x1, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000380)={'\t\x00', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r5, &(0x7f0000000400)=ANY=[], 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r6) keyctl$update(0x2, r7, &(0x7f0000000a80), 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000200), 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000200)='s', 0x1) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) pipe(&(0x7f0000000200)) keyctl$describe(0x6, 0x0, &(0x7f00000000c0)=""/83, 0x53) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b705000000000000720a23fe000000008500000012000000b70000000000000095000000000000004e625894684e890d31ae451306371a0a5447a801b8c1fe0209c4f0c4bf97e6555e61345400f9bd42abeb9adeb279f797013ea9c1a21902ff075436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca23b944477bebbe8282f07a95d767437a397bf8f50e80bf946e7dfd876bffc402887781979461c43000000005c79435883df6c10ce86ff860971f2a5405e453228e7b1005bd73479358a90df3e481947de646e736aa572158af6ea63d6d418fbbd2bbae4f7a39d1da098ef78dffcff5e1ed19913a5fb25c79dac2e489f681278926581f9e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517e92c26637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024fbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6a18438e2357a9c1e0609b2bec5003d6f41e8ed4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb822e202222c03fa84ccc3cfe7171094018630366397266090212343aedfbf7afe89c2eb775b0d828e3da222eee3b64ed00c7635738015a43ecac66d80810da0e23b501dc7eb084c9a8391fd3efa514a3c0322465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa4602c54401a76406f0718d4efd10afa938af5304210d1b676b378a5879e47941de1a28c3a8f4be28628bd443537d0e032b7d2badd0bc6617a859b7ac272b634135ecea6f43291829030f06cc0c10daf6a275daf5db2dac70b0fedb05e68d56401d1e73ce6b144503d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e88071aaf79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249674b08f7b718f6e32eaa50c178fdeeae7e57a6187122e0af9c41df2eee004a694cf3c3188a83f24594d30ace74e917a8c254d9bcf3b4731b6bda2757a7d79456c9fc00"/885], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0xdc, 0x0, &(0x7f0000000080)="0000000000000000000000001000", 0x0, 0xdc}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000140)=0x3, 0x4) rmdir(0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 153.099786] audit: type=1400 audit(1573142986.249:16): avc: denied { prog_run } for pid=3220 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 16:09:48 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/167) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0300170000070000d912f33200005fb2f725d90a95a3fa0a8ba65de4b040688b820c39dde48b03537dc570a3853579685c035de9b8957f24ab16624d9699cf9949691b2f94b0fd774585ea6f811febf45fdfb06b3c6f5bcc5ad401be479c80025b2f6126f5334883d717f6df1bc41f129092be93c33860c4573c7217173751f9e345acbb6d90a833137a0c7e771eb99eec89e94e85fd2cb5d0684de7d77b2deea705c8b8e8"], 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r4, 0x0, 0x0, 0x13) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780)='/dev/zero\x00', 0x400, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="487b1c4d2c2da386c3b08db047092ed3da5bddb113afc0985bab9a35f0a2aaf5bbf7cc4a1d23b6eb6225510000000000004f59761c71b63b914973ef1e67bcbe2b81fbe6c96bce49cb37a68e8c025a982b1b9c8ffc18c31f140a598fcca39d7ab1109228dd70aa8da6d42df415489e41c29a", @ANYRES16=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x2000040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r10, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r7, 0x0}]) r11 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) finit_module(r11, &(0x7f00000002c0)='}*vboxnet0^\x00', 0x2) sendfile(r0, r3, 0x0, 0x800000000024) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000140)={0x0, 0x7fffffff, 0x7d84d670, 0xd9, 0x0, "379d5d221358879d52fd6549424119b1291fd0", 0x0, 0x4}) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x200004) 16:09:48 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@ip_tos_int={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{0x0}], 0x1, &(0x7f0000003000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}], 0x4, 0x4000000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_int(r1, &(0x7f0000000340)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2102020}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fedbdf2501000000080002007f0000000c00000008001949af55b5d41cc3aacf9e6df56de65a0200093fda000000000000000000080003000cb900"/82], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40181) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) shutdown(r2, 0x400000000000001) sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 16:09:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(0x0, 0x0) mount(&(0x7f0000000680)=ANY=[], &(0x7f0000000700)='./bus\x00', &(0x7f0000000380)='hfsplus\x00', 0x0, &(0x7f0000000740)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) flistxattr(r2, 0x0, 0xfffffffffffffff8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000640)=0x482) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000003c0)={0x1, 0x8, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @random="3148cd0eae0e", @local, @local, @random="b26e9dc257b4", @random="bcf72d94c59b", @broadcast]}) r4 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x882) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) open(0x0, 0x141042, 0x0) r6 = open(0x0, 0x141042, 0x0) ftruncate(r6, 0x2007fff) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="d9342b379221489cdc6047ed58355d1a04f41188722f41b78e5222f1dd6fc7bee0e68871ccea94109a0fd62bffbd3a4c4dc46a7e487938b9bc411b76c2f1e0002c7236bc93af6644d441e46f625fe09c5a251df2356f07dd26da50405b84e65dcd4986ade46026111118b0a6f6636c458c03eb3b9e876f1a7ce87277aa6dd70e3d63ecc3e7954c19fc685eab609ba3ce74c7"], &(0x7f0000000080)='GPL\x005t\xea\xdca$\r\x01\xf4\x10\xfd\xf0\xcc*\xf3r!\x04\xe5\xc1@\xf8\xee\xe2\xab\xe2\xc7s\x04\xc1y\xe7\f\x9a\x7f\xd9\xb2\xfb\x03\xf0\xe6\xc3O\x1ai\xa6\xc0\xfd\x9f\x8b\x13\f\x13M\xaf\xf1\xd0\x81Z?F\xfbM-^a\'\xed\xfe\xcc\x9b_\x83\x99f\x93C\x8f\'g\xaeq\x92GFu[\xf5\xd5\xf0\x924(\xe1\xdc\x81\x86C\x7f\xb1\xc4\xfb\xb3e\xa4\x94\xfcYI\x03\xaf\x19\x9bp9-PG\xe5\xf8{v\xe0\xbb\xe4\xef[\x9b\xc3\v\xc6;4\x18\xbb\x83\xdc\x13q\t`\xf1X!\xf5\xb9\xdc\xf6 \xc4\x04\xbe\x14\x16DI\xa1<\x97\xecb\'>f\x8c\xd0\xb0e', 0x1, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100026}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=@getlink={0x3d4, 0x12, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, 0x918, 0x1000}, [@IFLA_MTU={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7fffffff}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_PHYS_PORT_ID={0xc, 0x22, "85a84f71cbc7c510"}, @IFLA_VFINFO_LIST={0x314, 0x16, [{0x60, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x400, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb97, 0x100000000}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5, 0xce6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, [{0x14, 0x1, {0x7d, 0x91e, 0x2, 0x8100}}]}]}, {0xec, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xad3d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xaf, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xe20, 0xfb}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, [{0x14, 0x1, {0x2, 0x56e, 0x100, 0x88a8}}, {0x14, 0x1, {0x2, 0x91a, 0x8, 0x8100}}, {0x14, 0x1, {0x32f0c5ca, 0xa2, 0x3, 0x88a8}}, {0x14, 0x1, {0x80000001, 0xd91, 0x3e, 0x18aa8}}, {0x14, 0x1, {0x8, 0xe49, 0x2, 0x8100}}, {0xfffffffffffffec0, 0x1, {0x8000000, 0x607, 0xf, 0x8100}}, {0x14, 0x1, {0x1000, 0xf99, 0x80, 0x88a8}}, {0x14, 0x1, {0x4, 0x3b0, 0x7, 0x4928}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10000}}]}, {0xb4, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x20, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x101, 0x89d, 0x88}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xbed}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0xeb6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6c180, 0x4c8, 0x80000001}}, @IFLA_VF_RATE={0x10, 0x6, {0x7fffffff, 0x9, 0x10000}}, @IFLA_VF_MAC={0x28, 0x1, {0x541ab9ab, @dev={[], 0x18}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @link_local}}]}, {0x30, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x401, 0x7}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, [{0x14, 0x1, {0x1, 0x107, 0x0, 0x8100}}]}]}, {0x3c, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xccf, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8512, 0xdfa, 0x10000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x7}}]}, {0x10, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xecd7}}]}, {0x94, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7f}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0xb167, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x0, 0x1f}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffffb50}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x3, 0x6}}]}]}, @IFLA_PORT_SELF={0x4c, 0x19, [@IFLA_PORT_PROFILE={0x10, 0x2, '/dev/loop#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa23974eb8b48696bf3b7272f20f31e3"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "648a1c16b102c1e9f7badcaf77760abc"}]}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_EVENT={0x1e4, 0x2c, 0x6}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0x10000}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x800}, 0x20040010) r8 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r9) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) sendfile(r3, r4, &(0x7f00000001c0), 0x20002000005) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000c80)={'veth1_to_hsr\x00', &(0x7f0000000dc0)=ANY=[@ANYBLOB="200000003b00810000000000000035be8de1f0d18ebf89e17bce1fdbf814f76a8b8b671fb364d5139b10052df24d700cee10abea5e107dfea84a821de0a8c57330e3e3c0f1c586dd579db2779a89640bdd2e6cf125311bd9be245e50ba9f18355611298c9bb0dc3b12cc7f425abf37983a66bde7f965f633041ab058dbc7bb0fb962d7de806136e914abad9eb703ec13e14c452f70917261b491481527f1ed72849977d5cfe3bf"]}) ioctl$LOOP_CLR_FD(r4, 0x4c01) connect$inet(r0, &(0x7f00000000c0), 0x10) 16:09:48 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x1c1842, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000009, 0x30, r0, 0x3000) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}]) r6 = dup3(r3, r4, 0x0) write$binfmt_script(r3, &(0x7f0000000380)={'#! ', './bus', [{0x20, '#'}, {0x20, 'trusted.overlay.upper\x00'}, {0x20, 'system'}, {0x20, 'trusted.overlay.upper\x00'}, {0x20, 'vboxnet0]@'}, {0x20, 'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00'}, {0x20, 'threaded\x00'}, {0x20, '\'wlan0md5sum\\@}'}, {0x20, 'threaded\x00'}, {0x20, 'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00'}], 0xa, "28dd3cda139d15883f58554fdfa99ca72da023b6a7ae0df5ad62e473708844cd85f229c03f14cdd8da8f215812cdbe0d52cffb0987d938fcb8a17f36703b0a88b84201897c841123fecb52fc7c884b46d6e3ff87ad83df5d922fd402ad38c1b29ad4435040f3102887709b10ad0e2cb35282e7a7f12cc6bf700eb4bfdcb994079a243b5749b3af0993d96800edc216639c8a46"}, 0x124) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timerfd_settime(r6, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f0000000240)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xad, 0x0, 0x13, "b1fdfdb36954fe169d92d8f1b7847116", "c46906d27e7883afb35b2c259ffdb46089c93986b646a8b59b40182f8b406d2b4b5bf64ea3a185e45c54c0b70c427f283968883e577e62a58ab68e2efeaeec5e98390a234bc991ea0504d24658f6a52e10e52dbac74e60c48f603156ac223565b5f2e0fda3c8c3f9115244ee0bdc91f81a5a9bc788898754671ed6a58480b502b96cfe80e07f4a2cc11253ac3270da0e3a5dd2bc52634f30"}, 0xad, 0x2) getresuid(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r10, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r7, 0x0}]) r11 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r11, 0xc008744c, &(0x7f0000000080)={0xc025, 0x1}) 16:09:48 executing program 0: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa283000c200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x139b}, 0x0) close(0xffffffffffffffff) [ 154.890576] audit: type=1400 audit(1573142988.039:17): avc: denied { create } for pid=3249 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:09:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) r4 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r8, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}]) r9 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000325bd7000fcdbdf250100bf95c7cc1538275cf46a8de20000fc03040005000000080000000101000002000000400000003b020200022000000800050001000000b50004000800"], 0x3}, 0x1, 0x0, 0x0, 0x4015090}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r13, 0xc7591a2b0cc62a4a, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x2]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r14 = socket$inet6(0xa, 0x400000000001, 0x0) close(r14) r15 = socket(0x100000000000011, 0x2, 0x81) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r16 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) ftruncate(r16, 0x87ffd) sendfile(r14, r16, 0x0, 0x800000000024) 16:09:48 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0xca6a311ff40611f7, 0x2) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000140)=0x8e) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, &(0x7f0000000300)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe22}}], [{@smackfsdef={'smackfsdef', 0x3d, ':^eth0\xc44keyring\xd3!\''}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@audit='audit'}, {@obj_role={'obj_role'}}]}) [ 155.004656] audit: type=1400 audit(1573142988.119:18): avc: denied { mac_admin } for pid=3247 comm="syz-executor.4" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 155.044036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 155.069673] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 155.165076] print_req_error: I/O error, dev loop4, sector 0 [ 155.202422] EXT4-fs (sda1): Unrecognized mount option "smackfsdef=:^eth0Ä4keyringÓ!'" or missing value [ 155.203050] ================================================================== [ 155.219464] BUG: KASAN: use-after-free in __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.227538] Write of size 3586 at addr ffff88818fb0fca0 by task syz-executor.3/3265 [ 155.235337] [ 155.237001] CPU: 1 PID: 3265 Comm: syz-executor.3 Not tainted 4.14.152+ #0 [ 155.244036] Call Trace: [ 155.246651] dump_stack+0xca/0x134 [ 155.250207] ? __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.255939] ? __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.261670] print_address_description+0x60/0x226 [ 155.266530] ? __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.272262] ? __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.277991] __kasan_report.cold+0x1a/0x41 [ 155.282262] ? lock_acquire+0xb1/0x360 [ 155.286163] ? __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.291910] memset+0x20/0x40 [ 155.295040] __ext4_expand_extra_isize.isra.0+0x10b/0x1c0 [ 155.300612] ext4_mark_inode_dirty+0x471/0x7f0 [ 155.305484] ? ext4_expand_extra_isize+0x500/0x500 [ 155.310449] ? ext4_dirty_inode+0x51/0x90 [ 155.314607] ? ext4_journal_check_start+0x13d/0x1e0 [ 155.319730] ? __ext4_journal_start_sb+0x120/0x490 [ 155.324695] ext4_dirty_inode+0x6c/0x90 [ 155.328703] ? ext4_setattr+0x2340/0x2340 [ 155.332872] __mark_inode_dirty+0x69c/0x1080 [ 155.337318] ? block_write_end+0x42/0xf0 [ 155.341418] generic_write_end+0x19a/0x250 [ 155.345693] ext4_da_write_end+0x25b/0xc40 [ 155.349977] generic_perform_write+0x281/0x460 [ 155.354614] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 155.359336] ? current_time+0xb0/0xb0 [ 155.363166] ? lock_acquire+0x12b/0x360 [ 155.367171] __generic_file_write_iter+0x32e/0x550 [ 155.372130] ? generic_write_checks+0x252/0x410 [ 155.376862] ext4_file_write_iter+0x58f/0xdb0 [ 155.381410] ? ext4_llseek+0x7f0/0x7f0 [ 155.385441] ? trace_hardirqs_on+0x10/0x10 [ 155.388138] EXT4-fs error (device sda1): ext4_xattr_ibody_get:590: inode #16548: comm syz-executor.2: corrupted in-inode xattr [ 155.389712] ? check_preemption_disabled+0x35/0x1f0 [ 155.389770] __vfs_write+0x401/0x5a0 [ 155.410164] ? HARDIRQ_verbose+0x10/0x10 [ 155.414263] ? kernel_read+0x110/0x110 [ 155.418209] ? check_preemption_disabled+0x35/0x1f0 [ 155.423276] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 155.428770] ? rcu_read_lock_sched_held+0x10a/0x130 [ 155.434015] vfs_write+0x17f/0x4d0 [ 155.437592] SyS_write+0x102/0x250 [ 155.441154] ? SyS_read+0x250/0x250 [ 155.444801] ? do_clock_gettime+0xd0/0xd0 [ 155.448979] ? do_syscall_64+0x43/0x520 [ 155.452972] ? SyS_read+0x250/0x250 [ 155.456633] do_syscall_64+0x19b/0x520 [ 155.460568] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 155.465772] RIP: 0033:0x45a219 [ 155.468974] RSP: 002b:00007fdf32a92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.476708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 155.483998] RDX: 00000000175d900f RSI: 0000000020000200 RDI: 0000000000000004 [ 155.491285] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 155.498578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf32a936d4 [ 155.505873] R13: 00000000004cab82 R14: 00000000004e3048 R15: 00000000ffffffff [ 155.513240] [ 155.514879] The buggy address belongs to the page: [ 155.519829] page:ffffea00063ec3c0 count:2 mapcount:0 mapping:ffff8881d56b8950 index:0x42e [ 155.528183] flags: 0x400000000000203a(referenced|dirty|lru|active|private) [ 155.535223] raw: 400000000000203a ffff8881d56b8950 000000000000042e 00000002ffffffff [ 155.543133] raw: ffffea00063b8aa0 ffffea00063e6e60 ffff8881d0ea0e70 ffff8881d641aa80 [ 155.551034] page dumped because: kasan: bad access detected [ 155.556763] page->mem_cgroup:ffff8881d641aa80 [ 155.561273] [ 155.562908] Memory state around the buggy address: [ 155.567851] ffff88818fb0ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.575230] ffff88818fb0ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.582620] >ffff88818fb10000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.589992] ^ [ 155.593370] ffff88818fb10080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.601181] ffff88818fb10100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.608556] ================================================================== fatal error: s.freeindex > s.nelems goroutine 14 [running]: runtime.throw(0x900734, 0x16) /syzkaller/go/src/runtime/panic.go:605 +0x95 fp=0xc437dff350 sp=0xc437dff330 pc=0x42b955 runtime.(*mspan).nextFreeIndex(0x7f78bab9e770, 0x20) /syzkaller/go/src/runtime/mbitmap.go:223 +0x168 fp=0xc437dff388 sp=0xc437dff350 pc=0x4123e8 runtime.(*mcache).nextFree(0x7f78bb5a56c8, 0x24, 0x380, 0x320, 0x84f620) /syzkaller/go/src/runtime/malloc.go:549 +0x55 fp=0xc437dff3e0 sp=0xc437dff388 pc=0x410415 runtime.mallocgc(0x120, 0x86f200, 0x84f601, 0x86f201) /syzkaller/go/src/runtime/malloc.go:711 +0x6fa fp=0xc437dff488 sp=0xc437dff3e0 pc=0x410d3a runtime.newarray(0x86f200, 0x2, 0xc4204da180) /syzkaller/go/src/runtime/malloc.go:853 +0x60 fp=0xc437dff4b8 sp=0xc437dff488 pc=0x411150 runtime.makeBucketArray(0x83aa60, 0x1, 0xa0000000032, 0x38) /syzkaller/go/src/runtime/hashmap.go:927 +0xf5 fp=0xc437dff500 sp=0xc437dff4b8 pc=0x40a0b5 runtime.hashGrow(0x83aa60, 0xc437dff740) /syzkaller/go/src/runtime/hashmap.go:951 +0xa3 fp=0xc437dff560 sp=0xc437dff500 pc=0x40a273 runtime.mapassign_fast64(0x83aa60, 0xc437dff740, 0xc4204cb500, 0xc437dff7f0) /syzkaller/go/src/runtime/hashmap_fast.go:573 +0x1b2 fp=0xc437dff5c0 sp=0xc437dff560 pc=0x40c8c2 github.com/google/syzkaller/prog.clone(0xbf98e0, 0xc4204cb500, 0xc437dff740, 0xbf97e0, 0xc429139880) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:73 +0x6d8 fp=0xc437dff6c0 sp=0xc437dff5c0 pc=0x709d48 github.com/google/syzkaller/prog.(*Prog).Clone(0xc4204cae40, 0x8be66d) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:20 +0x1bd fp=0xc437dff810 sp=0xc437dff6c0 pc=0x70939d github.com/google/syzkaller/prog.resourceCentric(0xedb040, 0xc4212b4eb0, 0xc429b87960, 0xc435330b01, 0xc4354b6240, 0x5, 0x23) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:817 +0xc1 fp=0xc437dff8f0 sp=0xc437dff810 pc=0x72b081 github.com/google/syzkaller/prog.(*ResourceType).generate(0xedb040, 0xc429b87960, 0xc4212b4eb0, 0x800bc0, 0xc43543d701, 0x10800354b6240, 0x30, 0x30) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:650 +0x9d2 fp=0xc437dffab8 sp=0xc437dff8f0 pc=0x729492 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc429b87960, 0xc4212b4eb0, 0xc2e800, 0xedb040, 0xc435124000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:643 +0x1e2 fp=0xc437dffb68 sp=0xc437dffab8 pc=0x728332 github.com/google/syzkaller/prog.(*randGen).generateArg(0xc429b87960, 0xc4212b4eb0, 0xc2e800, 0xedb040, 0xc4354b6240, 0x5, 0x23, 0x5, 0x23) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:592 +0x52 fp=0xc437dffbc8 sp=0xc437dffb68 pc=0x7280f2 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc429b87960, 0xc4212b4eb0, 0xd4e040, 0x3, 0x3, 0x4dfc6b, 0xc4353cec60, 0xfb2d23e83269702, 0xc437dffd50, 0x4dfe4f, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:580 +0x18b fp=0xc437dffce8 sp=0xc437dffbc8 pc=0x727d5b github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc429b87960, 0xc4212b4eb0, 0x10f8840, 0x18, 0xc4212b4eb0, 0xc4326ec5f8) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:524 +0xe6 fp=0xc437dffd88 sp=0xc437dffce8 pc=0x7270a6 github.com/google/syzkaller/prog.(*randGen).generateCall(0xc429b87960, 0xc4212b4eb0, 0xc4240e4200, 0x0, 0xc4240e4200, 0xc4240e4240, 0xc4212b4eb0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:516 +0xb4 fp=0xc437dffdc8 sp=0xc437dffd88 pc=0x726ec4 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc437dffeb0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:137 +0xf5 fp=0xc437dffe30 sp=0xc437dffdc8 pc=0x71b0e5 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc4240e4200, 0xbf15e0, 0xc4354ec4e0, 0x1e, 0xc4354ee440, 0xc432012000, 0x663b, 0x7800) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:42 +0x2f6 fp=0xc437dffef8 sp=0xc437dffe30 pc=0x71a596 main.(*Proc).loop(0xc4354ee700) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:99 +0x490 fp=0xc437dfffd8 sp=0xc437dffef8 pc=0x7c34b0 runtime.goexit() /syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc437dfffe0 sp=0xc437dfffd8 pc=0x45c971 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x1153 goroutine 1 [select]: main.(*Fuzzer).pollLoop(0xc4201d6420) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:320 +0x170 main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:262 +0x1322 goroutine 19 [syscall, 2 minutes]: os/signal.signal_recv(0x0) /syzkaller/go/src/runtime/sigqueue.go:131 +0xa6 os/signal.loop() /syzkaller/go/src/os/signal/signal_unix.go:22 +0x22 created by os/signal.init.0 /syzkaller/go/src/os/signal/signal_unix.go:28 +0x41 goroutine 9 [chan receive, 2 minutes]: main.main.func1(0xc42005a120) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x53c goroutine 8 [chan receive, 2 minutes]: github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc42005a120) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xed created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f goroutine 25 [select, 2 minutes, locked to thread]: runtime.gopark(0x99f728, 0x0, 0x8c341a, 0x6, 0x18, 0x1) /syzkaller/go/src/runtime/proc.go:277 +0x12c runtime.selectgo(0xc4201a7f50, 0xc42008e060) /syzkaller/go/src/runtime/select.go:395 +0x1138 runtime.ensureSigM.func1() /syzkaller/go/src/runtime/signal_unix.go:511 +0x220 runtime.goexit() /syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 goroutine 26 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518d30, 0x72, 0x0) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc420114118, 0x72, 0xffffffffffffff00, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc420114118, 0xc420120000, 0x1000, 0x1000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc420114100, 0xc420120000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a net.(*netFD).Read(0xc420114100, 0xc420120000, 0x1000, 0x1000, 0x0, 0x0, 0x4) /syzkaller/go/src/net/fd_unix.go:202 +0x52 net.(*conn).Read(0xc42006a118, 0xc420120000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /syzkaller/go/src/net/net.go:176 +0x6d bufio.(*Reader).fill(0xc4200504e0) /syzkaller/go/src/bufio/bufio.go:97 +0x11a bufio.(*Reader).ReadByte(0xc4200504e0, 0x7, 0xc42001c600, 0xc42001d688) /syzkaller/go/src/bufio/bufio.go:239 +0x39 compress/flate.(*decompressor).moreBits(0xc42001c600, 0x0, 0x0) /syzkaller/go/src/compress/flate/inflate.go:694 +0x37 compress/flate.(*decompressor).nextBlock(0xc42001c600) /syzkaller/go/src/compress/flate/inflate.go:303 +0x39 compress/flate.(*decompressor).Read(0xc42001c600, 0xc4202e4000, 0x1000, 0x1000, 0xc4201d1b80, 0x408729, 0xc4201d1c08) /syzkaller/go/src/compress/flate/inflate.go:347 +0x72 github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc420151560, 0xc4202e4000, 0x1000, 0x1000, 0x99e660, 0xc4201d1c18, 0x42a8e8) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51 bufio.(*Reader).Read(0xc420050540, 0xc4200687c0, 0x1, 0x9, 0xc4201d1ca8, 0x42a8e8, 0x99e660) /syzkaller/go/src/bufio/bufio.go:213 +0x30b io.ReadAtLeast(0xbea6a0, 0xc420050540, 0xc4200687c0, 0x1, 0x9, 0x1, 0xc42001b300, 0xc42db1eab0, 0x199) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0xbea6a0, 0xc420050540, 0xc4200687c0, 0x1, 0x9, 0xc4201d1d10, 0x4043ab, 0x3) /syzkaller/go/src/io/io.go:327 +0x58 encoding/gob.decodeUintReader(0xbea6a0, 0xc420050540, 0xc4200687c0, 0x9, 0x9, 0xc4201d1d88, 0x42a229, 0xc400000008, 0xc42008cc40) /syzkaller/go/src/encoding/gob/decode.go:120 +0x63 encoding/gob.(*Decoder).recvMessage(0xc42015ad80, 0xc4201d1da0) /syzkaller/go/src/encoding/gob/decoder.go:80 +0x57 encoding/gob.(*Decoder).decodeTypeSequence(0xc42015ad80, 0x99f800, 0xc42015ad80) /syzkaller/go/src/encoding/gob/decoder.go:144 +0x14c encoding/gob.(*Decoder).DecodeValue(0xc42015ad80, 0x806d40, 0xc420151c80, 0x16, 0x0, 0x0) /syzkaller/go/src/encoding/gob/decoder.go:212 +0xe6 encoding/gob.(*Decoder).Decode(0xc42015ad80, 0x806d40, 0xc420151c80, 0x0, 0x0) /syzkaller/go/src/encoding/gob/decoder.go:189 +0x16d net/rpc.(*gobClientCodec).ReadResponseHeader(0xc420151bc0, 0xc420151c80, 0xc42db1ea80, 0x0) /syzkaller/go/src/net/rpc/client.go:223 +0x45 net/rpc.(*Client).input(0xc420050600) /syzkaller/go/src/net/rpc/client.go:109 +0xb5 created by net/rpc.NewClientWithCodec /syzkaller/go/src/net/rpc/client.go:201 +0xc5 goroutine 13 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518eb0, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42dbb3288, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc42dbb3288, 0xc4306df701, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42dbb3270, 0xc4306df720, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42000ca38, 0xc4306df720, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42000ca38, 0xc4306df720, 0xc, 0xc, 0xc4306df720, 0xc420029180, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d io.ReadAtLeast(0xbeb620, 0xc42000ca38, 0xc4306df720, 0xc, 0xc, 0xc, 0x8696a0, 0xc437e03901, 0xc4306df720) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0xbeb620, 0xc42000ca38, 0xc4306df720, 0xc, 0xc, 0x0, 0x0, 0xc437e03c28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc42af12150, 0xc4200142a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc42ee34f00, 0x20, 0x3, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:750 +0x28c github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc4212538c0, 0xc4200142a0, 0xc425777840, 0x3, 0x4dfb33, 0xc434046000, 0x36c03249b1a732c6, 0x741cef, 0x8bf549, 0x4) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x118 main.(*Proc).executeRaw(0xc4354ee580, 0xc4200142a0, 0xc425777840, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 main.(*Proc).execute(0xc4354ee580, 0xc4200142a0, 0xc425777840, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc4354ee580) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x54b created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x1153 goroutine 15 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518130, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc433c90d38, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc433c90d38, 0xc4306deb01, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc433c90d20, 0xc4306debe0, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006b298, 0xc4306debe0, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006b298, 0xc4306debe0, 0xc, 0xc, 0xc4306debe0, 0xc420028380, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d io.ReadAtLeast(0xbeb620, 0xc42006b298, 0xc4306debe0, 0xc, 0xc, 0xc, 0x8696a0, 0xc437ecf901, 0xc4306debe0) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0xbeb620, 0xc42006b298, 0xc4306debe0, 0xc, 0xc, 0x0, 0x0, 0xc437ecfc28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc428900310, 0xc4200142a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc437ecfcb8, 0xc420028380, 0x3, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:750 +0x28c github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc421253a70, 0xc4200142a0, 0xc432c05340, 0x2, 0x4dfb33, 0xc430dfe000, 0x7678e177bb027361, 0x741cef, 0x8bf549, 0x4) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x118 main.(*Proc).executeRaw(0xc4354eea40, 0xc4200142a0, 0xc432c05340, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 main.(*Proc).execute(0xc4354eea40, 0xc4200142a0, 0xc432c05340, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc4354eea40) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x54b created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x1153 goroutine 16 [IO wait]: internal/poll.runtime_pollWait(0x7f78baaedc00, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc432daf418, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc432daf418, 0xc42ff22601, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc432daf400, 0xc42ff22640, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006b698, 0xc42ff22640, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006b698, 0xc42ff22640, 0xc, 0xc, 0xc42ff22640, 0xc42008aa80, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d io.ReadAtLeast(0xbeb620, 0xc42006b698, 0xc42ff22640, 0xc, 0xc, 0xc, 0x8696a0, 0xc437ecb901, 0xc42ff22640) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0xbeb620, 0xc42006b698, 0xc42ff22640, 0xc, 0xc, 0x0, 0x0, 0xc437ecbc28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc4289003f0, 0xc4200142a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc437ecbcc8, 0x4401c8, 0x3, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:750 +0x28c github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc421253c20, 0xc4200142a0, 0xc42ff0f340, 0x0, 0x4dfb33, 0xc430e00a00, 0x1efc09c6d8af7647, 0x741cef, 0x8bf0cd, 0x4) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x118 main.(*Proc).executeRaw(0xc4354eee40, 0xc4200142a0, 0xc42ff0f340, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 main.(*Proc).execute(0xc4354eee40, 0xc4200142a0, 0xc42ff0f340, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc4354eee40) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x54b created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x1153 goroutine 33 [IO wait]: internal/poll.runtime_pollWait(0x7f78baaed780, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42c3d0838, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc42c3d0838, 0xc42ff22701, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42c3d0820, 0xc42ff22730, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006bb00, 0xc42ff22730, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006bb00, 0xc42ff22730, 0xc, 0xc, 0xc42ff22730, 0x18ac6a0, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d io.ReadAtLeast(0xbeb620, 0xc42006bb00, 0xc42ff22730, 0xc, 0xc, 0xc, 0x8696a0, 0xc437f1f901, 0xc42ff22730) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0xbeb620, 0xc42006bb00, 0xc42ff22730, 0xc, 0xc, 0x0, 0x0, 0xc437f1fc28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc428900540, 0xc4200142a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc437f1fcc8, 0x4401c8, 0x3, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:750 +0x28c github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc421253dd0, 0xc4200142a0, 0xc430ae74c0, 0xb, 0x4dfb33, 0xc42ce17500, 0x5f6be5ee36227588, 0x741cef, 0x8bf549, 0x4) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x118 main.(*Proc).executeRaw(0xc4354eeec0, 0xc4200142a0, 0xc430ae74c0, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 main.(*Proc).execute(0xc4354eeec0, 0xc4200142a0, 0xc430ae74c0, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc4354eeec0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x54b created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x1153 goroutine 34 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518a30, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42ff2ce28, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc42ff2ce28, 0xc4314ac001, 0xc, 0xc) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42ff2ce10, 0xc4314ac060, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42000ca98, 0xc4314ac060, 0xc, 0xc, 0x0, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42000ca98, 0xc4314ac060, 0xc, 0xc, 0xc4314ac060, 0x18ac6a0, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d io.ReadAtLeast(0xbeb620, 0xc42000ca98, 0xc4314ac060, 0xc, 0xc, 0xc, 0x8696a0, 0xc437f1b901, 0xc4314ac060) /syzkaller/go/src/io/io.go:309 +0x86 io.ReadFull(0xbeb620, 0xc42000ca98, 0xc4314ac060, 0xc, 0xc, 0x0, 0x0, 0xc437f1bc28) /syzkaller/go/src/io/io.go:327 +0x58 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc42af121c0, 0xc4200142a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc437f1bcc8, 0x4401c8, 0x3, ...) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:750 +0x28c github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc421253ef0, 0xc4200142a0, 0xc4337dd480, 0x9, 0x4dfb33, 0xc4285a4000, 0x6bd530919d04f475, 0x741cef, 0x8bf549, 0x4) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:280 +0x118 main.(*Proc).executeRaw(0xc4354eefc0, 0xc4200142a0, 0xc4337dd480, 0x1, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 main.(*Proc).execute(0xc4354eefc0, 0xc4200142a0, 0xc4337dd480, 0x0, 0x1, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 main.(*Proc).loop(0xc4354eefc0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:101 +0x54b created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:259 +0x1153 goroutine 27 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518df0, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42dbb31e8, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc42dbb31e8, 0xc437e62001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42dbb31d0, 0xc437e62000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42000ca28, 0xc437e62000, 0x20000, 0x20000, 0xc4200266b8, 0xc420026710, 0x101) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42000ca28, 0xc437e62000, 0x20000, 0x20000, 0x20000, 0x20000, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42000ca28, 0xc42af12150) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:590 +0x804 goroutine 111 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc428900540, 0xc428df2300, 0xc428df21e0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:735 +0xf5 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0x1a3 goroutine 29 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518c70, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42dbb3dc8, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc42dbb3dc8, 0xc437f47801, 0x1e7bb, 0x1e7bb) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42dbb3db0, 0xc437f47845, 0x1e7bb, 0x1e7bb, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42000ca88, 0xc437f47845, 0x1e7bb, 0x1e7bb, 0xc5c, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42000ca88, 0xc437f47845, 0x1e7bb, 0x1e7bb, 0xc5c, 0x0, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42000ca88, 0xc42af121c0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:590 +0x804 goroutine 35 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb518730, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc43270d4b8, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc43270d4b8, 0xc437ea8001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc43270d4a0, 0xc437ea8000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006ae90, 0xc437ea8000, 0x20000, 0x20000, 0xc420025eb8, 0xc420025f10, 0x101) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006ae90, 0xc437ea8000, 0x20000, 0x20000, 0x20000, 0x20000, 0xc420025fb0) /syzkaller/go/src/os/file.go:103 +0x6d github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42006ae90, 0xc428900150) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:590 +0x804 goroutine 36 [IO wait]: internal/poll.runtime_pollWait(0x7f78bb5182b0, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc4338d1eb8, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc4338d1eb8, 0xc437ed9901, 0x1e608, 0x1e608) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc4338d1ea0, 0xc437ed99f8, 0x1e608, 0x1e608, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006b280, 0xc437ed99f8, 0x1e608, 0x1e608, 0xc, 0x0, 0x0) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006b280, 0xc437ed99f8, 0x1e608, 0x1e608, 0xc, 0x0, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42006b280, 0xc428900310) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:590 +0x804 goroutine 37 [IO wait]: internal/poll.runtime_pollWait(0x7f78baaedd80, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc432daf378, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc432daf378, 0xc437ef8001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc432daf360, 0xc437ef8000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006b680, 0xc437ef8000, 0x20000, 0x20000, 0xc4200256b8, 0xc420025710, 0x101) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006b680, 0xc437ef8000, 0x20000, 0x20000, 0x20000, 0x20000, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42006b680, 0xc4289003f0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:590 +0x804 goroutine 38 [IO wait]: internal/poll.runtime_pollWait(0x7f78baaed900, 0x72, 0x1) /syzkaller/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(*pollDesc).wait(0xc42c3d0748, 0x72, 0xffffffffffffff01, 0xbecca0, 0xbdc060) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae internal/poll.(*pollDesc).waitRead(0xc42c3d0748, 0xc437f26001, 0x20000, 0x20000) /syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(*FD).Read(0xc42c3d0730, 0xc437f26000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a os.(*File).read(0xc42006baf0, 0xc437f26000, 0x20000, 0x20000, 0xc420026eb8, 0xc420026f10, 0x101) /syzkaller/go/src/os/file_unix.go:216 +0x4e os.(*File).Read(0xc42006baf0, 0xc437f26000, 0x20000, 0x20000, 0x20000, 0x20000, 0x0) /syzkaller/go/src/os/file.go:103 +0x6d github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42006baf0, 0xc428900540) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0xc6 created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:590 +0x804 goroutine 109 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc4289003f0, 0xc42b24ff80, 0xc42b24ff20) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:735 +0xf5 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0x1a3 goroutine 116 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc428900310, 0xc42a87d980, 0xc42a87d920) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:735 +0xf5 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0x1a3 goroutine 107 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc42af121c0, 0xc42b24fce0, 0xc42b24fc20) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:735 +0xf5 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0x1a3 goroutine 117 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc42af12150, 0xc42a87db60, 0xc42a87da40) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:735 +0xf5 created by github.com/google/syzkaller/pkg/ipc.(*command).exec /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:733 +0x1a3 [ 155.615927] Disabling lock debugging due to kernel taint [ 155.776350] ------------[ cut here ]------------ [ 155.781255] kernel BUG at mm/memory.c:1508! [ 155.800835] print_req_error: I/O error, dev loop4, sector 80 [ 155.802117] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 155.806682] Buffer I/O error on dev loop4, logical block 10, async page read [ 155.812570] Modules linked in: [ 155.812582] CPU: 1 PID: 3234 Comm: syz-executor.4 Tainted: G B 4.14.152+ #0 [ 155.812587] task: 000000005ff36639 task.stack: 00000000d2a55267 [ 155.812605] RIP: 0010:unmap_page_range+0x1034/0x1320 [ 155.812609] RSP: 0018:ffff888198037648 EFLAGS: 00010297 [ 155.812616] RAX: ffff8881d084de00 RBX: dffffc0000000000 RCX: 0000be48f5894855 [ 155.812619] RDX: 0000000000000000 RSI: ffffffffae257490 RDI: ffff8881980377f0 [ 155.812623] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed103206a6c4 [ 155.812627] R10: ffffed103206a6c3 R11: ffff88819035361b R12: ffffffffae257498 [ 155.812631] R13: ffff888190353180 R14: 0000be48f5894855 R15: 5441554156415741 [ 155.812637] FS: 00007f683ad81700(0000) GS:ffff8881d7700000(0000) knlGS:0000000000000000 [ 155.812641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.812644] CR2: 00007f66e96a8330 CR3: 00000001e2026003 CR4: 00000000001606a0 [ 155.812650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.812654] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.812657] Call Trace: [ 155.812675] ? arch_get_unmapped_area+0x490/0x490 [ 155.812684] ? HARDIRQ_verbose+0x10/0x10 [ 155.812701] ? __kasan_slab_free+0x1c5/0x210 [ 155.812714] ? lock_acquire+0x12b/0x360 [ 155.812724] ? _vm_normal_page+0x2f0/0x2f0 [ 155.812738] ? arch_tlb_gather_mmu.part.0+0x8f/0x100 [ 155.812747] ? arch_tlb_gather_mmu+0x236/0x2d0 [ 155.812755] ? arch_get_unmapped_area+0x490/0x490 [ 155.812761] ? arch_get_unmapped_area_topdown+0x8/0x4d0 [ 155.812773] __oom_reap_task_mm+0x18b/0x2d0 [ 155.968832] ? process_shares_mm+0x120/0x120 [ 155.973349] ? _raw_spin_unlock_irqrestore+0x40/0x70 [ 155.978468] ? check_preemption_disabled+0x35/0x1f0 [ 155.983504] ? perf_trace_lock+0x11e/0x4e0 [ 155.987751] ? check_preemption_disabled+0x35/0x1f0 [ 155.992786] exit_mmap+0x366/0x440 [ 155.996335] ? SyS_munmap+0x30/0x30 [ 155.999964] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 156.004905] ? __ksm_exit+0xc5/0x5f0 [ 156.008628] ? lock_downgrade+0x630/0x630 [ 156.012785] ? lock_acquire+0x12b/0x360 [ 156.016760] ? __ksm_exit+0x30/0x5f0 [ 156.020479] ? do_raw_spin_unlock+0x50/0x220 [ 156.024889] ? _raw_spin_unlock+0x29/0x40 [ 156.029132] ? __ksm_exit+0xc5/0x5f0 [ 156.032851] mmput+0xeb/0x370 [ 156.035959] do_exit+0x905/0x2a20 [ 156.039407] ? perf_trace_lock_acquire+0x4a1/0x4e0 [ 156.044521] ? HARDIRQ_verbose+0x10/0x10 [ 156.048593] ? mm_update_next_owner+0x610/0x610 [ 156.053267] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 156.058196] ? get_signal+0x334/0x1cc0 [ 156.062091] ? lock_downgrade+0x630/0x630 [ 156.066245] ? lock_acquire+0x12b/0x360 [ 156.070217] ? get_signal+0x1e7/0x1cc0 [ 156.074107] do_group_exit+0x100/0x2e0 [ 156.077996] get_signal+0x39f/0x1cc0 [ 156.081732] do_signal+0x96/0x15d0 [ 156.085284] ? __might_fault+0x104/0x1b0 [ 156.089350] ? setup_sigcontext+0x810/0x810 [ 156.094193] ? lock_acquire+0x12b/0x360 [ 156.098170] ? __might_fault+0xd4/0x1b0 [ 156.102302] ? _copy_to_user+0x82/0xd0 [ 156.106204] ? SyS_futex+0x1c5/0x2c3 [ 156.109920] ? SyS_futex+0x1cf/0x2c3 [ 156.113650] ? do_futex+0x1980/0x1980 [ 156.117452] ? exit_to_usermode_loop+0xcd/0x160 [ 156.122166] exit_to_usermode_loop+0x11d/0x160 [ 156.126766] do_syscall_64+0x3a3/0x520 [ 156.130673] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.135862] RIP: 0033:0x45a219 [ 156.139043] RSP: 002b:00007f683ad80cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.146838] RAX: 0000000000000000 RBX: 000000000075bfd0 RCX: 000000000045a219 [ 156.154119] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 156.161392] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 156.168668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 156.175957] R13: 00007ffd2d8fea1f R14: 00007f683ad819c0 R15: 000000000075bfd4 [ 156.183249] Code: 7c 24 60 e8 0f 6a 02 00 4c 8b 7c 24 38 e9 83 f2 ff ff e8 50 99 e3 ff 48 8b 7c 24 58 e8 86 69 02 00 e9 96 f2 ff ff e8 3c 99 e3 ff <0f> 0b e8 35 99 e3 ff 31 d2 be a6 05 00 00 48 c7 c7 60 32 0b b0 [ 156.202633] RIP: unmap_page_range+0x1034/0x1320 RSP: ffff888198037648 [ 156.209329] kasan: CONFIG_KASAN_INLINE enabled [ 156.213915] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 156.221269] general protection fault: 0000 [#2] PREEMPT SMP KASAN NOPTI [ 156.228005] Modules linked in: [ 156.231189] CPU: 1 PID: 3234 Comm: syz-executor.4 Tainted: G B D 4.14.152+ #0 [ 156.239396] task: 000000005ff36639 task.stack: 00000000d2a55267 [ 156.245444] RIP: 0010:__enqueue_entity+0x80/0x230 [ 156.250438] RSP: 0018:ffff8881d7707b10 EFLAGS: 00010007 [ 156.255784] RAX: 000000000048a6d8 RBX: 0000000002453685 RCX: ffffffffae3986a6 [ 156.263037] RDX: 0000000000000000 RSI: ffff8881d7729308 RDI: 00000000024536c5 [ 156.270294] RBP: ffff888193fec730 R08: 00000000e0ccdeeb R09: fffffbfff6208485 [ 156.277548] R10: fffffbfff6208484 R11: 0000000000000003 R12: dffffc0000000000 [ 156.284799] R13: ffff8881d6642f80 R14: 0000000b69c7ec2b R15: 00000000005b8d80 [ 156.292060] FS: 00007f683ad81700(0000) GS:ffff8881d7700000(0000) knlGS:0000000000000000 [ 156.300282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.306152] CR2: 00007f66e96a8330 CR3: 00000001e2026003 CR4: 00000000001606a0 [ 156.313408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.320772] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.328026] Call Trace: [ 156.330594] [ 156.332733] ? account_entity_enqueue+0x1ff/0x340 [ 156.337566] enqueue_task_fair+0xbf4/0x6300 [ 156.341880] ? kvm_sched_clock_read+0x5/0x10 [ 156.346268] ? sched_clock+0x5/0x10 [ 156.350061] ttwu_do_activate+0xd3/0x200 [ 156.354107] try_to_wake_up+0x803/0x1290 [ 156.358153] ? perf_trace_lock+0x11e/0x4e0 [ 156.362374] ? migrate_swap_stop+0x810/0x810 [ 156.366764] ? lock_acquire+0x12b/0x360 [ 156.370730] ? run_timer_softirq+0x5d0/0x5d0 [ 156.375119] call_timer_fn+0x15b/0x6a0 [ 156.379016] ? collect_expired_timers+0x280/0x280 [ 156.383844] ? __next_timer_interrupt+0x11a/0x140 [ 156.388676] ? run_timer_softirq+0x5d0/0x5d0 [ 156.393068] expire_timers+0x227/0x4c0 [ 156.396942] run_timer_softirq+0x1eb/0x5d0 [ 156.401163] ? expire_timers+0x4c0/0x4c0 [ 156.405208] ? check_preemption_disabled+0x35/0x1f0 [ 156.410228] ? kvm_clock_read+0x1f/0x30 [ 156.414224] ? ktime_get+0x135/0x1b0 [ 156.417976] ? default_inquire_remote_apic+0x50/0x50 [ 156.423075] __do_softirq+0x234/0x9ec [ 156.426898] ? check_preemption_disabled+0x35/0x1f0 [ 156.431913] irq_exit+0x114/0x150 [ 156.435353] smp_apic_timer_interrupt+0x1a7/0x650 [ 156.440181] ? add_taint+0x37/0x50 [ 156.443723] apic_timer_interrupt+0x8c/0xa0 [ 156.448028] [ 156.450254] RIP: 0010:oops_end+0x43/0x90 [ 156.454295] RSP: 0018:ffff888198037410 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10 [ 156.461986] RAX: ffff8881d084de00 RBX: 0000000000000297 RCX: ffffffffae2d89e7 [ 156.469256] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000297 [ 156.476524] RBP: 000000000000000b R08: 0000000000000000 R09: fffffbfff6102c91 [ 156.483792] R10: fffffbfff6102c90 R11: 0000000000000003 R12: 0000000000000004 [ 156.491049] R13: ffff888198037598 R14: ffff8881d084de00 R15: ffff8881d084f0b0 [ 156.498360] ? add_taint+0x37/0x50 [ 156.501899] do_trap+0x1b8/0x250 [ 156.505268] do_error_trap+0x145/0x2d0 [ 156.509146] ? math_error+0x2d0/0x2d0 [ 156.512936] ? unmap_page_range+0x1034/0x1320 [ 156.517418] ? HARDIRQ_verbose+0x10/0x10 [ 156.521466] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 156.526483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.531316] invalid_op+0x18/0x40 [ 156.534782] RIP: 0010:unmap_page_range+0x1034/0x1320 [ 156.539868] RSP: 0018:ffff888198037648 EFLAGS: 00010297 [ 156.545231] RAX: ffff8881d084de00 RBX: dffffc0000000000 RCX: 0000be48f5894855 [ 156.552489] RDX: 0000000000000000 RSI: ffffffffae257490 RDI: ffff8881980377f0 [ 156.559747] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed103206a6c4 [ 156.567090] R10: ffffed103206a6c3 R11: ffff88819035361b R12: ffffffffae257498 [ 156.574343] R13: ffff888190353180 R14: 0000be48f5894855 R15: 5441554156415741 [ 156.581618] ? arch_get_unmapped_area_topdown+0x8/0x4d0 [ 156.587029] ? arch_get_unmapped_area+0x490/0x490 [ 156.591873] ? unmap_page_range+0x1034/0x1320 [ 156.596364] ? arch_get_unmapped_area+0x490/0x490 [ 156.601197] ? HARDIRQ_verbose+0x10/0x10 [ 156.605249] ? __kasan_slab_free+0x1c5/0x210 [ 156.609641] ? lock_acquire+0x12b/0x360 [ 156.613608] ? _vm_normal_page+0x2f0/0x2f0 [ 156.617825] ? arch_tlb_gather_mmu.part.0+0x8f/0x100 [ 156.622924] ? arch_tlb_gather_mmu+0x236/0x2d0 [ 156.627492] ? arch_get_unmapped_area+0x490/0x490 [ 156.634573] ? arch_get_unmapped_area_topdown+0x8/0x4d0 [ 156.639963] __oom_reap_task_mm+0x18b/0x2d0 [ 156.644273] ? process_shares_mm+0x120/0x120 [ 156.648674] ? _raw_spin_unlock_irqrestore+0x40/0x70 [ 156.653853] ? check_preemption_disabled+0x35/0x1f0 [ 156.658868] ? perf_trace_lock+0x11e/0x4e0 [ 156.663085] ? check_preemption_disabled+0x35/0x1f0 [ 156.668095] exit_mmap+0x366/0x440 [ 156.671617] ? SyS_munmap+0x30/0x30 [ 156.675233] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 156.680151] ? __ksm_exit+0xc5/0x5f0 [ 156.683859] ? lock_downgrade+0x630/0x630 [ 156.687987] ? lock_acquire+0x12b/0x360 [ 156.691942] ? __ksm_exit+0x30/0x5f0 [ 156.695767] ? do_raw_spin_unlock+0x50/0x220 [ 156.700158] ? _raw_spin_unlock+0x29/0x40 [ 156.704300] ? __ksm_exit+0xc5/0x5f0 [ 156.708029] mmput+0xeb/0x370 [ 156.711129] do_exit+0x905/0x2a20 [ 156.714566] ? perf_trace_lock_acquire+0x4a1/0x4e0 [ 156.719566] ? HARDIRQ_verbose+0x10/0x10 [ 156.723609] ? mm_update_next_owner+0x610/0x610 [ 156.728273] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 156.733199] ? get_signal+0x334/0x1cc0 [ 156.737075] ? lock_downgrade+0x630/0x630 [ 156.741207] ? lock_acquire+0x12b/0x360 [ 156.745167] ? get_signal+0x1e7/0x1cc0 [ 156.749040] do_group_exit+0x100/0x2e0 [ 156.752913] get_signal+0x39f/0x1cc0 [ 156.756622] do_signal+0x96/0x15d0 [ 156.760160] ? __might_fault+0x104/0x1b0 [ 156.764228] ? setup_sigcontext+0x810/0x810 [ 156.768529] ? lock_acquire+0x12b/0x360 [ 156.772486] ? __might_fault+0xd4/0x1b0 [ 156.776455] ? _copy_to_user+0x82/0xd0 [ 156.780331] ? SyS_futex+0x1c5/0x2c3 [ 156.784024] ? SyS_futex+0x1cf/0x2c3 [ 156.787822] ? do_futex+0x1980/0x1980 [ 156.791606] ? exit_to_usermode_loop+0xcd/0x160 [ 156.796262] exit_to_usermode_loop+0x11d/0x160 [ 156.800838] do_syscall_64+0x3a3/0x520 [ 156.804714] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.809888] RIP: 0033:0x45a219 [ 156.813066] RSP: 002b:00007f683ad80cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.820759] RAX: 0000000000000000 RBX: 000000000075bfd0 RCX: 000000000045a219 [ 156.828012] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 156.835266] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 156.842516] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 156.849854] R13: 00007ffd2d8fea1f R14: 00007f683ad819c0 R15: 000000000075bfd4 [ 156.857123] Code: 02 00 0f 85 c1 01 00 00 4d 8b 75 50 ba 01 00 00 00 49 bc 00 00 00 00 00 fc ff df eb 03 48 89 c3 48 8d 7b 40 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 da 00 00 00 4c 3b 73 40 48 8d 6b 10 78 06 [ 156.877961] RIP: __enqueue_entity+0x80/0x230 RSP: ffff8881d7707b10 [ 156.884262] ---[ end trace 4c44b7346495420b ]--- [ 156.889232] Kernel panic - not syncing: Fatal exception in interrupt [ 157.990620] Shutting down cpus with NMI [ 157.995660] Kernel Offset: 0x2d200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 158.007222] Rebooting in 86400 seconds..