[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 11.583069] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.753084] random: sshd: uninitialized urandom read (32 bytes read) [ 25.046984] audit: type=1400 audit(1568611754.186:6): avc: denied { map } for pid=1771 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 25.095940] random: sshd: uninitialized urandom read (32 bytes read) [ 25.684136] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. [ 31.230287] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/16 05:29:20 fuzzer started [ 31.321366] audit: type=1400 audit(1568611760.466:7): avc: denied { map } for pid=1780 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 31.911599] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/16 05:29:22 dialing manager at 10.128.0.26:37083 2019/09/16 05:29:22 syscalls: 1347 2019/09/16 05:29:22 code coverage: enabled 2019/09/16 05:29:22 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/16 05:29:22 extra coverage: extra coverage is not supported by the kernel 2019/09/16 05:29:22 setuid sandbox: enabled 2019/09/16 05:29:22 namespace sandbox: enabled 2019/09/16 05:29:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/16 05:29:22 fault injection: CONFIG_FAULT_INJECTION is not enabled 2019/09/16 05:29:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/16 05:29:22 net packet injection: enabled 2019/09/16 05:29:22 net device setup: enabled [ 34.602260] random: crng init done 05:30:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) 05:30:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b0ee895", 0x1a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 05:30:27 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='I', 0x1}], 0x1, 0x40000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") fallocate(r0, 0x0, 0x0, 0x8000) lseek(r0, 0x0, 0x3) 05:30:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 05:30:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e750844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 05:30:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x19, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) [ 98.696074] audit: type=1400 audit(1568611827.836:8): avc: denied { map } for pid=1780 comm="syz-fuzzer" path="/root/syzkaller-shm834646744" dev="sda1" ino=16500 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 98.800134] audit: type=1400 audit(1568611827.836:9): avc: denied { map } for pid=1839 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5044 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 100.794775] hrtimer: interrupt took 33876 ns 05:30:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x1bdd307, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 05:30:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={'batadv0\x00', @ifru_flags}) 05:30:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) [ 101.316878] FAT-fs (loop0): codepage cp437 not found 05:30:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 05:30:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b0ee8", 0x19}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 101.445726] FAT-fs (loop0): codepage cp437 not found [ 101.517600] FAT-fs (loop0): codepage cp437 not found 05:30:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r1, 0x0) 05:30:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) [ 102.722198] FAT-fs (loop1): codepage cp437 not found 05:30:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) [ 102.768237] FAT-fs (loop1): codepage cp437 not found 05:30:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000"], &(0x7f0000000280)=""/237, 0x34, 0xed, 0x1}, 0x20) 05:30:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xc0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="08ac684c8416ff591201983263e9", 0x0, 0x1b}, 0x28) [ 102.905744] audit: type=1400 audit(1568611832.046:10): avc: denied { prog_load } for pid=2818 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 102.936981] audit: type=1400 audit(1568611832.076:11): avc: denied { prog_run } for pid=2818 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 05:30:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1e) getsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) 05:30:32 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x7) 05:30:32 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg(r1, &(0x7f0000007900), 0x4000099, 0x0) close(r0) 05:30:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000300)) 05:30:32 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xa3) 05:30:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hug\atl\x04\x00\x00\x00\x00\x00\x00\x00age_irs\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 05:30:32 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 05:30:32 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'bridge0\x00', @ifru_ivalue}) 05:30:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r3, &(0x7f0000000140)={0x0, 0x3a98, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfadf}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x0) 05:30:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x49, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 05:30:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair(0x0, 0x0, 0x6000000000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = getpid() sendmmsg$unix(r0, &(0x7f0000002680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x1, 0x0) 05:30:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:30:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) 05:30:32 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 05:30:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0xfffffffffffffdb9) 05:30:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f00000002c0)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0xfffffffffffffdb9) 05:30:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'\x00\x00@', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 05:30:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x8000}) 05:30:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 05:30:32 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='=', 0x1, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0) 05:30:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b710bdf61e81b4c8b057a5", 0xae, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 05:30:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 05:30:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x2011, r1, 0x0) mmap(&(0x7f0000b39000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 103.389555] FAT-fs (loop5): codepage cp437 not found [ 103.408883] audit: type=1400 audit(1568611832.546:12): avc: denied { map } for pid=2916 comm="syz-executor.4" path="socket:[9028]" dev="sockfs" ino=9028 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 05:30:32 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x820082, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 05:30:32 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xa3) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 05:30:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 05:30:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) 05:30:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) [ 103.812483] FAT-fs (loop2): codepage cp437 not found [ 103.881123] FAT-fs (loop2): codepage cp437 not found 05:30:33 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) 05:30:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0), 0x4) 05:30:33 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000004) 05:30:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000080)={0xffffffffffffffff}) timerfd_gettime(r1, 0x0) 05:30:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x500}) 05:30:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f329c867a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080f882dccab370b227c3c9139f8ec7144f651bedff8afafce2d93041b54c5a85307abcca720d2cd28c12a628ea1dd314d8edc7e1fa5f96f4498be5bd459bb3655167cafab09cd86fa63829"], 0x119) write$UHID_INPUT2(r0, &(0x7f00000003c0), 0x6) 05:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f00000003c0)) 05:30:33 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)) 05:30:33 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x820082, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 05:30:33 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000d6de8e219d5586dd6008de0600383a0000000000000000000000ffffe0000002ff02000000008c4831ae0000000000010400907800000000609433df00003a000000000000000000000000000000000100000000000000000000000000000001fca967e17f791010db3369c45fa4ad896fc29f689fcc36444fd146c424fa8e659e5118cd87393f46"], 0x0) 05:30:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x8040ae9f, 0x0) [ 104.259538] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:33 executing program 4: [ 104.314753] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:33 executing program 3: 05:30:33 executing program 5: 05:30:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f00000002c0)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0xfffffffffffffdb9) 05:30:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 05:30:33 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_gettime(0x0, 0x0) 05:30:33 executing program 5: 05:30:33 executing program 4: 05:30:33 executing program 2: 05:30:33 executing program 3: 05:30:33 executing program 5: 05:30:33 executing program 1: 05:30:33 executing program 2: 05:30:33 executing program 0: 05:30:33 executing program 3: 05:30:33 executing program 4: 05:30:33 executing program 1: 05:30:33 executing program 3: 05:30:33 executing program 0: 05:30:33 executing program 5: 05:30:33 executing program 4: 05:30:33 executing program 0: 05:30:33 executing program 3: 05:30:33 executing program 1: 05:30:33 executing program 2: 05:30:33 executing program 4: 05:30:33 executing program 5: 05:30:33 executing program 2: 05:30:33 executing program 1: 05:30:33 executing program 0: 05:30:33 executing program 3: 05:30:33 executing program 4: 05:30:33 executing program 0: 05:30:33 executing program 3: 05:30:34 executing program 5: 05:30:34 executing program 1: 05:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xc0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r2, 0x4) 05:30:34 executing program 4: 05:30:34 executing program 3: 05:30:34 executing program 5: 05:30:34 executing program 3: 05:30:34 executing program 4: 05:30:34 executing program 0: 05:30:34 executing program 1: 05:30:34 executing program 3: 05:30:34 executing program 0: 05:30:34 executing program 2: 05:30:34 executing program 5: 05:30:34 executing program 4: 05:30:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0x0) 05:30:34 executing program 5: 05:30:34 executing program 3: 05:30:34 executing program 2: 05:30:34 executing program 4: 05:30:34 executing program 0: 05:30:34 executing program 1: 05:30:34 executing program 2: 05:30:34 executing program 4: 05:30:34 executing program 0: 05:30:34 executing program 1: 05:30:34 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='I', 0x1}], 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) lseek(r0, 0x0, 0x3) 05:30:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 05:30:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x800000007}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000000100), 0x5bd, 0x24000004) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 05:30:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000300)=0x9, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) 05:30:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, 0x0, 0x8800000) 05:30:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x3) 05:30:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00\x04', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 05:30:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 05:30:34 executing program 0: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) 05:30:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210800000000000000000300000028000100966c010069623a74756e6c30000000001400020008590300e1000000080070000000000065f5dc7656aa67087754306700cbaa2384d79cf41a17d68c0649ec86023ab6a535fb16d2a882"], 0x3c}}, 0x0) 05:30:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\f'], 0x1) lseek(r1, 0x0, 0x3) 05:30:34 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 05:30:34 executing program 1: add_key$keyring(&(0x7f0000000000)='\x80\xff\xff\xff\xff\xff\xff\xff', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, 0x0, 0xc4) 05:30:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') lseek(r0, 0x21, 0x0) [ 105.403850] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 105.422652] audit: type=1400 audit(1568611834.566:13): avc: denied { create } for pid=3165 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 05:30:34 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f00000003c0), 0x6) 05:30:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f00000002c0)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\xd6\x01\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0xfffffffffffffdb9) 05:30:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 05:30:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 105.515634] audit: type=1400 audit(1568611834.596:14): avc: denied { write } for pid=3165 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 105.602499] audit: type=1400 audit(1568611834.616:15): avc: denied { read } for pid=3165 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 05:30:34 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x800000007}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000000100), 0x5bd, 0x24000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x0) recvmsg(r1, 0x0, 0x2000) accept(0xffffffffffffffff, 0x0, 0x0) 05:30:34 executing program 3: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='I', 0x1}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") fallocate(r0, 0x0, 0x0, 0x8000) lseek(r0, 0x0, 0x3) 05:30:35 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1a"], 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x8000}) 05:30:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) pipe2(0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:30:35 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x109, 0x100031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) 05:30:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) 05:30:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x3a98, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfadf}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 05:30:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/202, 0xca}, 0x120) [ 106.176559] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 05:30:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 05:30:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote={0xac, 0x8}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) 05:30:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f00000002c0)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\xd6\x01\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0xfffffffffffffdb9) [ 106.250213] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.264879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.282270] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.290700] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:30:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) umount2(0x0, 0x0) 05:30:35 executing program 4: [ 106.297459] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.304506] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.311749] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.318484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.325271] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.332102] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.338884] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:30:35 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000009000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) [ 106.400787] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:30:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 05:30:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 106.442932] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.474228] FAT-fs (loop0): codepage cp437 not found [ 106.482609] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:30:35 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) [ 106.489881] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:30:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) [ 106.499224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.523772] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.531155] FAT-fs (loop0): codepage cp437 not found 05:30:35 executing program 1: socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3ff, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100)) [ 106.563944] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.571324] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.578242] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.593154] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.614316] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.626987] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.645559] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.656790] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.673455] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.680775] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.688205] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.696262] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.703091] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.709825] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.716877] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.723681] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.730560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.737285] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.744053] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.750829] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.761314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.768813] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.775565] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.782281] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.788950] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.795941] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.802679] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.809370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.816166] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.822894] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.829571] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.836340] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.843071] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.849743] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.856463] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.863195] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.869871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.876683] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.883377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.890101] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.896771] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.903921] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.910682] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.917361] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.924103] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.930809] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.937499] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.944241] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.950964] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.957646] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.964379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.971089] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.977758] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.984472] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.991184] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 106.997859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.005973] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.012674] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.019355] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.026170] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.032983] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.039732] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.046809] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.053526] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.060266] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.067072] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.073810] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.080533] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.087198] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.093917] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.100609] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.107275] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.113989] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.120728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.127397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.134140] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.140849] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.147528] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.154239] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.160940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.167612] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.174331] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.181027] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.187685] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.194384] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.201074] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.207732] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.214438] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.221134] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.227795] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.234504] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.241205] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.247867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.254589] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.261327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.267998] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.274708] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.281501] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.288202] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.294918] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.301692] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.308452] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.315217] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.321926] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.328617] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.335342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.342042] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.348813] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.355518] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.362211] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.368879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.375582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.382273] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.388950] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.395664] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.402376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.409135] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.416025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.422742] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.429505] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.436244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.442939] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.449605] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.456312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.463012] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.469694] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.476417] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.483120] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.489780] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.496497] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.503198] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.509860] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.516566] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.523426] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.530156] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.536846] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.543579] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.550372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.557042] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.563814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.570507] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.577168] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.583875] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.590599] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.597268] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.603998] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.610693] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.617366] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.624075] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.630771] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.637429] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.644150] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.650864] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.657534] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.664243] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.670993] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.677658] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.684361] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.691058] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.697751] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.704462] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.711158] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.717822] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.724543] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.731243] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.737914] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.744635] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.751432] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.758119] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.764841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.771570] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.778232] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.784949] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.791798] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.798531] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.805266] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.812038] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.818746] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.825471] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.832267] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.839066] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.845913] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.852826] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.859508] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.866246] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.873860] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.887951] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.894802] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.901868] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.908681] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.915868] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.922887] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.929573] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.936571] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.943307] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.949994] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.957154] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.963968] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.970907] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.977594] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.984322] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.991039] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.997725] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.004582] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.011304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.018239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.024979] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.031692] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.038354] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.045786] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.052498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.059158] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.065885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.072594] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.079264] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.085965] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.092671] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.099327] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.106029] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.112743] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.119410] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.126117] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.132911] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.139587] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.146300] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.153072] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.159733] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.166439] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.173145] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.179813] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.186543] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.193257] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.199945] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.206667] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.213373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.220112] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.226902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.235616] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.242429] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.249096] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.255807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.262588] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.269255] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.275993] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.282691] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.289349] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.296069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.302751] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.309402] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.316103] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.322796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.329468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.336289] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.343049] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.349903] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.356605] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.363300] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.369958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.376654] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.383337] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.389996] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.396796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.403505] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.410239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.416921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.423885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.430594] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.437257] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.443980] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.450683] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.457340] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.464048] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.470765] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.477434] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.484152] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.490856] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.497515] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.504223] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.510924] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.517586] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.524298] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.530991] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.537655] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.546794] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.553490] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.560311] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.567006] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.573730] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.580540] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.587209] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.594022] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.600765] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.607424] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.614131] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.620844] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.627513] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.634304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.641122] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.647832] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.654554] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.661253] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.667917] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.674643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.681346] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.688008] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.694757] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.701451] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.708107] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.714911] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.721612] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.728272] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.734979] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.742983] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.749780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.756483] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.763178] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.769834] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.776538] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.783243] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.789934] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.796659] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.803357] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.810088] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.816765] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.823477] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.830323] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.836987] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.843890] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.850629] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.857313] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.864047] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.870767] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.877432] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.884138] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.890857] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.897518] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.904235] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.910960] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.917629] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.924402] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.931101] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.937785] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.944510] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.951206] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.958006] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.964777] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.971468] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.978130] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.984984] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.991686] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 108.998358] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.005063] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.011760] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.018443] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.025166] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.031859] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.038519] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.045237] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.051966] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.058626] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.065329] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.072020] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.078677] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.085481] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.092189] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.098852] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.105565] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.112262] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.118972] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.125716] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.132428] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.139097] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.145798] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.152494] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.159163] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.165873] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.172588] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.179264] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.185973] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.192666] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.199323] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.206024] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.212707] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.219361] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.226062] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:30:38 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) getgid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b0ee895", 0x1a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 05:30:38 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f329c867a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080f882dccab370b227c3c9139f8ec7144f651bedff8afafce2d93041b54c5a85307abcca720d2cd28c12a628ea1dd314d8edc7e1fa5f96f4498be5bd459bb3655167cafab09cd86fa63829"], 0x119) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8, 0xe}], @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x44}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, 0x1, "04"}, 0x7) 05:30:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="210800000000000000000300000028000100966c010069623a74756e6c30000000001400020008590300e1000000080070000000000065f5dc7656aa67087754306700cbaa2384d79cf41a17d68c0649ec86023ab6a535fb16d2a882"], 0x3c}}, 0x0) 05:30:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 05:30:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, 0x0, 0x0) 05:30:38 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) [ 109.232783] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.239449] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.246179] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.253594] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 05:30:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000300)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x5441700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2, @loopback}) [ 109.292748] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000480)=0x80000001, 0x297) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 05:30:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, r1) [ 109.334915] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:38 executing program 4: add_key(&(0x7f0000001800)='user\x00', 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe) 05:30:38 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='I', 0x1}], 0x1, 0x40000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") fallocate(r0, 0x0, 0x0, 0x8000) 05:30:38 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)) [ 109.418006] FAT-fs (loop3): codepage cp437 not found 05:30:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) capget(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)) 05:30:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 05:30:38 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x18, r0, 0x0, 0x0) 05:30:38 executing program 5: 05:30:38 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendfile(r0, r0, 0x0, 0x8800000) 05:30:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x78) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x800000002c) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 05:30:38 executing program 3: 05:30:38 executing program 0: 05:30:38 executing program 1: 05:30:38 executing program 5: 05:30:38 executing program 1: 05:30:38 executing program 3: 05:30:38 executing program 4: 05:30:38 executing program 0: 05:30:38 executing program 5: 05:30:38 executing program 1: 05:30:38 executing program 3: 05:30:39 executing program 2: 05:30:39 executing program 0: 05:30:39 executing program 4: 05:30:39 executing program 5: 05:30:39 executing program 3: 05:30:39 executing program 1: 05:30:39 executing program 4: 05:30:39 executing program 1: 05:30:39 executing program 5: 05:30:39 executing program 3: 05:30:39 executing program 0: 05:30:39 executing program 2: 05:30:39 executing program 4: 05:30:39 executing program 5: 05:30:39 executing program 1: 05:30:39 executing program 0: 05:30:39 executing program 3: 05:30:39 executing program 2: 05:30:39 executing program 4: 05:30:39 executing program 5: 05:30:39 executing program 1: 05:30:39 executing program 3: 05:30:39 executing program 0: 05:30:39 executing program 2: 05:30:39 executing program 4: 05:30:39 executing program 1: 05:30:39 executing program 0: 05:30:39 executing program 5: 05:30:39 executing program 2: 05:30:39 executing program 3: 05:30:39 executing program 4: 05:30:39 executing program 1: 05:30:39 executing program 0: 05:30:39 executing program 2: 05:30:39 executing program 5: 05:30:39 executing program 3: 05:30:39 executing program 4: 05:30:39 executing program 3: 05:30:39 executing program 5: 05:30:39 executing program 4: 05:30:39 executing program 1: 05:30:39 executing program 2: 05:30:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0xa05, 0x0, 0x0, {0x3}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 05:30:39 executing program 3: 05:30:39 executing program 4: 05:30:39 executing program 1: 05:30:39 executing program 5: 05:30:39 executing program 2: 05:30:39 executing program 3: 05:30:39 executing program 4: 05:30:39 executing program 0: 05:30:39 executing program 5: 05:30:39 executing program 1: 05:30:39 executing program 2: 05:30:39 executing program 3: socket$inet6(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp(0x1, 0x1, 0x0) 05:30:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x80) 05:30:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000201, 0x150) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503000006063e0003000200c52cf7c25975e605b02f08067f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3fb2, 0x0, 0x0, 0x175) 05:30:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f329c867a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080f882dccab370b227c3c9139f8ec7144f651bedff8afafce2d93041b54c5a85307abcca720d2cd28c12a628ea1dd314d8edc7e1fa5f96f4498be5bd459bb3655167cafab09cd86fa63829"], 0x119) write$UHID_INPUT2(r0, &(0x7f00000003c0), 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:30:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000), 0x1c) 05:30:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lookup_dcookie(0x0, 0x0, 0x0) [ 110.706819] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r3, &(0x7f0000000140)={0x0, 0x3a98, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfadf}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 05:30:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:30:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg(r1, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x343}}], 0x1, 0x0) listen(r1, 0x400000000007) [ 110.769154] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:40 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 05:30:40 executing program 4: unshare(0x8000400) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 05:30:40 executing program 2: socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000400)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@remote}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r2 = socket$inet(0x10, 0x2, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ac2e7f83cc71381fb34bd868ea19db546beb5567587f77195ccc9ff1e032a78480b3e49165e1e5507e4a613dd5a9e113e75ebd66d83715e3e3279a697b"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) ptrace$getregs(0xc, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000380)) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x3}}}}}, 0x0) sendmsg(r2, 0x0, 0x0) r4 = open(0x0, 0x0, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r0, r4, 0x0) fchown(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 05:30:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) getsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) 05:30:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) 05:30:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x25b}}) [ 111.049557] FAT-fs (loop3): codepage cp437 not found 05:30:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, r1) 05:30:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000240)="240000005a001f00", 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f00000000c0)=""/140, &(0x7f0000000000)=0x8c) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 05:30:40 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 111.152533] FAT-fs (loop3): codepage cp437 not found 05:30:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b", 0x17}], 0x0, 0x0) umount2(0x0, 0x0) [ 111.346014] FAT-fs (loop3): codepage cp437 not found [ 111.372223] FAT-fs (loop5): codepage cp437 not found [ 111.429050] FAT-fs (loop5): codepage cp437 not found 05:30:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 05:30:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) 05:30:40 executing program 4: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400000002c2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x3, 0x0) pwritev(r1, 0x0, 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 05:30:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 05:30:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xc0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="08ac684c8416ff591201983263e9", 0x0, 0x7ff}, 0x28) 05:30:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000180)="f596d5e54a4c9abdd64e400a294af8903c2d41e10bd7aa1dd029e48882b517ca", 0x20, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="a913cfe07de36e6d39241a742b0ae14128a0c805b6e7587e24368b7d67f38068db9e7ad34c99cab44f960038aaf1f02e1893b75eb609b9fb49d11eb5277408acda79542f5423630ad0afaf216951b417703f8a7332fca640bfd759a82a61369830cc011749ee4f86e2eea5a4f5ba9289e1c2ad129b1a0288baf01a1ce33f9e1ee8c3f62153ffdd4121cb1871074c6b167a78511a3a73fabbc40c344e74e87af6263bc393afc6df85578a9c67bd2aed8e7598c8403ab6e05426c996ecbd27e700", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 05:30:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:30:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000023c0)=""/4096, 0x18}], 0x27) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 05:30:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000300)) 05:30:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x0) 05:30:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) [ 111.633964] input: syz1 as /devices/virtual/input/input4 05:30:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000023c0)=""/4096, 0x18}], 0x27) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 111.836532] input: syz1 as /devices/virtual/input/input6 INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes 05:30:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x611, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x1c}}, 0x0) 05:30:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 05:30:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) 05:30:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:30:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x800000004}, 0x3c) 05:30:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x9) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x0) 05:30:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 05:30:44 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x1c, {0x2, 0x0, @multicast2}, 'veth1_to_team\x00'}) 05:30:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b0ee895", 0x1a}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 115.256356] audit: type=1400 audit(1568611844.396:16): avc: denied { map_create } for pid=3842 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 05:30:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f329c867a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080f882dccab370b227c3c9139f8ec7144f651bedff8afafce2d93041b54c5a85307abcca720d2cd28c12a628ea1dd314d8edc7e1fa5f96f4498be5bd459bb3655167cafab09cd86fa63829"], 0x119) 05:30:44 executing program 0: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) lseek(r0, 0x0, 0x3) 05:30:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) 05:30:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) fchown(r0, 0x0, 0x0) 05:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000340)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f0000000540)='./file0\x00') [ 115.367154] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 115.386807] audit: type=1400 audit(1568611844.396:17): avc: denied { map_read map_write } for pid=3842 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 05:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000180)) 05:30:44 executing program 1: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0)="ed963a3880036f5885c2467fbcc43abb71cb26998ef021", 0x17, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="852000000000000054000000000000bf713200000000000034344701"], &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 115.449247] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 05:30:44 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1a"], 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x8000}) 05:30:44 executing program 5: socket$packet(0x11, 0x2, 0x300) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="cd80"], 0x2}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825a55f910c28f5e87a64820546a1ebed56adbd5b57f67b95778e2569f8e39808e0b61a0bf6a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea9424959d9ee275d661bd3c48f4855d4bd33886271153f162b6d3cbf1416a884b136571b79edff", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX], 0x0, 0x16a}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 115.493853] FAT-fs (loop4): codepage cp437 not found 05:30:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r3, &(0x7f0000000140)={0x0, 0x3a98, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfadf}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 05:30:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x9, [@link_local, @broadcast, @broadcast, @dev, @remote, @local, @remote, @empty, @random="e331f81bad7e"]}) [ 115.561154] audit: type=1400 audit(1568611844.656:18): avc: denied { getopt } for pid=3887 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 115.589691] FAT-fs (loop4): codepage cp437 not found 05:30:44 executing program 4: 05:30:44 executing program 3: 05:30:44 executing program 3: 05:30:44 executing program 4: 05:30:44 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg(r1, &(0x7f0000007900), 0x4000099, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) 05:30:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 05:30:44 executing program 2: 05:30:44 executing program 1: 05:30:45 executing program 2: 05:30:47 executing program 5: 05:30:47 executing program 0: 05:30:47 executing program 1: 05:30:47 executing program 3: 05:30:47 executing program 2: 05:30:47 executing program 4: 05:30:47 executing program 0: 05:30:47 executing program 2: 05:30:47 executing program 4: 05:30:47 executing program 3: 05:30:47 executing program 1: 05:30:47 executing program 5: 05:30:47 executing program 0: 05:30:47 executing program 3: 05:30:47 executing program 4: 05:30:47 executing program 2: 05:30:47 executing program 5: 05:30:47 executing program 1: 05:30:47 executing program 4: 05:30:47 executing program 3: 05:30:47 executing program 2: 05:30:47 executing program 0: 05:30:47 executing program 1: 05:30:47 executing program 5: 05:30:48 executing program 3: 05:30:48 executing program 4: 05:30:48 executing program 1: 05:30:48 executing program 5: 05:30:48 executing program 0: 05:30:48 executing program 2: 05:30:48 executing program 3: 05:30:48 executing program 4: 05:30:48 executing program 1: 05:30:48 executing program 3: 05:30:48 executing program 0: 05:30:48 executing program 5: 05:30:48 executing program 2: 05:30:48 executing program 4: 05:30:48 executing program 1: 05:30:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 05:30:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r1, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) 05:30:48 executing program 0: 05:30:48 executing program 1: 05:30:48 executing program 4: 05:30:48 executing program 2: 05:30:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) 05:30:48 executing program 0: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 05:30:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r0, r1, &(0x7f00000000c0)=0x9700, 0x8) 05:30:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000080)) 05:30:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 05:30:48 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) 05:30:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r0, r1, &(0x7f00000000c0)=0x97, 0x8) 05:30:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 05:30:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) 05:30:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 05:30:49 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x5a, {0x2, 0x0, @broadcast}, 'syzkaller0\x00'}) 05:30:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x2, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 119.915233] ================================================================== [ 119.922801] BUG: KASAN: use-after-free in tcp_init_tso_segs+0x19d/0x1f0 [ 119.929563] Read of size 2 at addr ffff8881d106acb0 by task syz-executor.4/4074 [ 119.937036] [ 119.938665] CPU: 1 PID: 4074 Comm: syz-executor.4 Not tainted 4.14.143+ #0 [ 119.945667] Call Trace: [ 119.948251] dump_stack+0xca/0x134 [ 119.951793] ? tcp_init_tso_segs+0x19d/0x1f0 [ 119.956214] ? tcp_init_tso_segs+0x19d/0x1f0 [ 119.960623] print_address_description+0x60/0x226 [ 119.965467] ? tcp_init_tso_segs+0x19d/0x1f0 [ 119.969877] ? tcp_init_tso_segs+0x19d/0x1f0 [ 119.974285] __kasan_report.cold+0x1a/0x41 [ 119.978525] ? kvm_guest_cpu_init+0x220/0x220 [ 119.983023] ? tcp_init_tso_segs+0x19d/0x1f0 [ 119.987460] tcp_init_tso_segs+0x19d/0x1f0 [ 119.991688] ? tcp_tso_segs+0x7b/0x1c0 [ 119.995578] tcp_write_xmit+0x15a/0x4730 [ 119.999650] ? memset+0x20/0x40 [ 120.002948] __tcp_push_pending_frames+0xa0/0x230 [ 120.007795] tcp_send_fin+0x154/0xbc0 [ 120.011604] tcp_close+0xc62/0xf40 [ 120.015155] inet_release+0xe9/0x1c0 [ 120.018878] __sock_release+0xd2/0x2c0 [ 120.022781] ? __sock_release+0x2c0/0x2c0 [ 120.026930] sock_close+0x15/0x20 [ 120.030391] __fput+0x25e/0x710 [ 120.033685] task_work_run+0x125/0x1a0 [ 120.037579] exit_to_usermode_loop+0x13b/0x160 [ 120.042165] do_syscall_64+0x3a3/0x520 [ 120.046070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 120.051264] RIP: 0033:0x4135d1 [ 120.054452] RSP: 002b:00007ffe7bae13d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 120.062160] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1 [ 120.069433] RDX: 0000001b2ee20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.076705] RBP: 0000000000000001 R08: 0000000080e89025 R09: 0000000080e89029 [ 120.083997] R10: 00007ffe7bae14b0 R11: 0000000000000293 R12: 000000000075bf20 [ 120.091268] R13: 000000000001d46a R14: 0000000000760290 R15: ffffffffffffffff [ 120.098576] [ 120.100203] Allocated by task 4078: [ 120.103831] __kasan_kmalloc.part.0+0x53/0xc0 [ 120.108329] kmem_cache_alloc+0xee/0x360 [ 120.112387] __alloc_skb+0xea/0x5c0 [ 120.116010] sk_stream_alloc_skb+0xf4/0x8a0 [ 120.120329] tcp_sendmsg_locked+0xf11/0x2f50 [ 120.124729] tcp_sendmsg+0x2b/0x40 [ 120.128262] inet_sendmsg+0x15b/0x520 [ 120.132059] sock_sendmsg+0xb7/0x100 [ 120.135770] SyS_sendto+0x1de/0x2f0 [ 120.139397] do_syscall_64+0x19b/0x520 [ 120.143291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 120.148487] 0xffffffffffffffff [ 120.151760] [ 120.153387] Freed by task 4078: [ 120.156668] __kasan_slab_free+0x164/0x210 [ 120.160903] kmem_cache_free+0xd7/0x3b0 [ 120.165009] kfree_skbmem+0x84/0x110 [ 120.168724] tcp_remove_empty_skb+0x264/0x320 [ 120.173240] tcp_sendmsg_locked+0x1c09/0x2f50 [ 120.177739] tcp_sendmsg+0x2b/0x40 [ 120.181286] inet_sendmsg+0x15b/0x520 [ 120.185091] sock_sendmsg+0xb7/0x100 [ 120.188807] SyS_sendto+0x1de/0x2f0 [ 120.192443] do_syscall_64+0x19b/0x520 [ 120.196336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 120.201527] 0xffffffffffffffff [ 120.204801] [ 120.206464] The buggy address belongs to the object at ffff8881d106ac80 [ 120.206464] which belongs to the cache skbuff_fclone_cache of size 456 [ 120.219828] The buggy address is located 48 bytes inside of [ 120.219828] 456-byte region [ffff8881d106ac80, ffff8881d106ae48) [ 120.231620] The buggy address belongs to the page: [ 120.236558] page:ffffea0007441a80 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 120.246538] flags: 0x4000000000010200(slab|head) [ 120.251305] raw: 4000000000010200 0000000000000000 0000000000000000 00000001000c000c [ 120.259190] raw: ffffea000717e380 0000000d0000000d ffff8881dab70400 0000000000000000 [ 120.267071] page dumped because: kasan: bad access detected [ 120.272778] [ 120.274407] Memory state around the buggy address: [ 120.279334] ffff8881d106ab80: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 120.283936] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 120.286688] ffff8881d106ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.286702] >ffff8881d106ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.286706] ^ 05:30:49 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f329c867a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000080f882dccab370b227c3c9139f8ec7144f651bedff8afafce2d93041b54c5a85307abcca720d2cd28c12a628ea1dd314d8edc7e1fa5f96f4498be5bd459bb3655167cafab09cd86fa63829"], 0x119) socket(0x0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, 0x1, "04"}, 0x7) 05:30:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hug\atl\x04\x00\x00\x00\x00\x00\x00\x00age_irs\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)) 05:30:49 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) [ 120.286714] ffff8881d106ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.323571] ffff8881d106ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.331218] ================================================================== [ 120.338579] Disabling lock debugging due to kernel taint 05:30:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) getdents(r0, 0x0, 0x0) [ 120.374677] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 120.424837] Kernel panic - not syncing: panic_on_warn set ... [ 120.424837] [ 120.432239] CPU: 1 PID: 4074 Comm: syz-executor.4 Tainted: G B 4.14.143+ #0 [ 120.440462] Call Trace: [ 120.443051] dump_stack+0xca/0x134 [ 120.446601] panic+0x1ea/0x3d3 [ 120.450360] ? add_taint.cold+0x16/0x16 [ 120.455315] ? tcp_init_tso_segs+0x19d/0x1f0 [ 120.463820] ? ___preempt_schedule+0x16/0x18 [ 120.472806] ? tcp_init_tso_segs+0x19d/0x1f0 [ 120.479576] end_report+0x43/0x49 [ 120.483313] ? tcp_init_tso_segs+0x19d/0x1f0 [ 120.487730] __kasan_report.cold+0xd/0x41 [ 120.491883] ? kvm_guest_cpu_init+0x220/0x220 [ 120.496473] ? tcp_init_tso_segs+0x19d/0x1f0 [ 120.501150] tcp_init_tso_segs+0x19d/0x1f0 [ 120.505557] ? tcp_tso_segs+0x7b/0x1c0 [ 120.509455] tcp_write_xmit+0x15a/0x4730 [ 120.513519] ? memset+0x20/0x40 [ 120.516804] __tcp_push_pending_frames+0xa0/0x230 [ 120.521664] tcp_send_fin+0x154/0xbc0 [ 120.525466] tcp_close+0xc62/0xf40 [ 120.529008] inet_release+0xe9/0x1c0 [ 120.532740] __sock_release+0xd2/0x2c0 [ 120.536622] ? __sock_release+0x2c0/0x2c0 [ 120.540795] sock_close+0x15/0x20 [ 120.544264] __fput+0x25e/0x710 [ 120.547545] task_work_run+0x125/0x1a0 [ 120.551433] exit_to_usermode_loop+0x13b/0x160 [ 120.556034] do_syscall_64+0x3a3/0x520 [ 120.559942] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 120.565125] RIP: 0033:0x4135d1 [ 120.568309] RSP: 002b:00007ffe7bae13d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 120.576010] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1 [ 120.584694] RDX: 0000001b2ee20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.591999] RBP: 0000000000000001 R08: 0000000080e89025 R09: 0000000080e89029 [ 120.599708] R10: 00007ffe7bae14b0 R11: 0000000000000293 R12: 000000000075bf20 [ 120.606975] R13: 000000000001d46a R14: 0000000000760290 R15: ffffffffffffffff [ 120.615003] Kernel Offset: 0x1a600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 120.625907] Rebooting in 86400 seconds..