[....] Starting enhanced syslogd: rsyslogd[ 13.128173] audit: type=1400 audit(1570014191.056:4): avc: denied { syslog } for pid=1918 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. 2019/10/02 11:03:31 fuzzer started 2019/10/02 11:03:32 dialing manager at 10.128.0.26:34377 2019/10/02 11:03:32 syscalls: 1333 2019/10/02 11:03:32 code coverage: enabled 2019/10/02 11:03:32 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/02 11:03:32 extra coverage: extra coverage is not supported by the kernel 2019/10/02 11:03:32 setuid sandbox: enabled 2019/10/02 11:03:32 namespace sandbox: enabled 2019/10/02 11:03:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/02 11:03:32 fault injection: kernel does not have systematic fault injection support 2019/10/02 11:03:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/02 11:03:32 net packet injection: enabled 2019/10/02 11:03:32 net device setup: enabled 11:03:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 11:03:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 11:03:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="66d50400a05b51191b364c7e8100", 0x12, 0x0, 0x0, 0x0) 11:03:55 executing program 3: 11:03:55 executing program 2: 11:03:55 executing program 4: 11:03:56 executing program 3: 11:03:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 11:03:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x800000007}, 0x1c) 11:03:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000100)=0x8a) 11:03:57 executing program 2: lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xae, 0x0, 0x0, 0x5}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffccd, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x0, 0x3}, 0xa1, 0x0, 0x2, 0x4, 0x8, 0x8, 0xfe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) 11:03:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r3, 0x80003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) init_module(0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x22063, 0x0) 11:03:57 executing program 1: fchdir(0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2100) 11:03:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, 0x0) 11:03:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) 11:03:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xffad, &(0x7f0000000c40)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xc) r0 = socket(0x11, 0x3, 0xc000000000000) listen(r0, 0x6) r1 = socket(0x10, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r3}], {0x10, 0x6}}, 0x2c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) prctl$PR_MCE_KILL_GET(0x22) 11:03:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendto$inet6(r0, 0x0, 0xfee9, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @ipv4={[], [], @loopback}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xbd010000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) dup3(r0, r1, 0x0) 11:03:57 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000400)=@generic={0x11, "0000080000000000e5ff43944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0c7301a4ce875f2e3ff5f163ee340b7679501000000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x27) write$binfmt_aout(r0, &(0x7f0000000780)={{0x108, 0x0, 0x0, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x5}, "e606f5ff1a110000160000001ca56ba789e38de5ce330cb1e4131a64bed48d5288de48a1fddc27f6144ad66b98205cadd4c5dc285b67a049ce30f79a281f9d60fc655f92"}, 0x64) 11:03:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x20008) 11:03:57 executing program 1: 11:03:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendto$inet6(r0, 0x0, 0xfee9, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @ipv4={[], [], @loopback}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xbd010000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) dup3(r0, r1, 0x0) 11:03:57 executing program 1: 11:03:57 executing program 0: 11:03:57 executing program 2: 11:03:57 executing program 2: 11:03:57 executing program 3: 11:03:57 executing program 5: 11:03:57 executing program 1: 11:03:57 executing program 0: 11:03:57 executing program 4: 11:03:57 executing program 3: 11:03:57 executing program 2: 11:03:57 executing program 0: 11:03:57 executing program 1: 11:03:57 executing program 5: 11:03:57 executing program 3: 11:03:57 executing program 1: 11:03:57 executing program 2: 11:03:57 executing program 4: 11:03:57 executing program 5: 11:03:57 executing program 3: 11:03:57 executing program 0: 11:03:57 executing program 2: 11:03:57 executing program 4: 11:03:57 executing program 1: 11:03:57 executing program 5: 11:03:57 executing program 1: 11:03:57 executing program 4: 11:03:57 executing program 0: 11:03:57 executing program 2: 11:03:57 executing program 3: 11:03:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) 11:03:57 executing program 3: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffeb6, 0x0, &(0x7f0000003880)={0x0, r0+10000000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r1, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 11:03:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r0, 0x7, 0x0, 0x100000001) 11:03:57 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x401) 11:03:57 executing program 2: 11:03:57 executing program 1: 11:03:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)) 11:03:57 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) 11:03:57 executing program 3: inotify_init() recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/211, 0xd3}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) 11:03:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000440), 0x12) 11:03:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x65, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) 11:03:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x38f4168b7592eaea, 0xed13f8ac3df0acdb, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0xfeffffff, 0x0, 0x150) 11:03:58 executing program 5: pipe(&(0x7f00000000c0)) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc}) 11:03:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000000)="c7", 0x1, 0x0, 0x0, 0x0) 11:03:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x11, 0x0, 0x100000001) 11:03:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x38f4168b7592eaea, 0xed13f8ac3df0acdb, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0xfeffffff, 0x0, 0x150) 11:03:58 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000953000/0x1000)=nil) 11:03:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890c, 0x0) 11:03:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) accept4$inet6(r1, 0x0, 0x0, 0x0) 11:03:58 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 11:03:58 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff0001002000f9ff000000000000ada8148004000000200000000000030006000000000002000080ac14fbbbf00000000000000003000500000000000200510d000077adf08297c05d7b1d5bf63a8b9af919322d9ce86530cbe9bf5042bb0ae4a4f19d656fe49e02ca2fdf4d5bbb47845413f50a272b07bf69ccc7b160e1163be8ece8540048e7e81e1eebd4c8e9350ceaff3376b75249a942afd293367d5c9e20c42a3a0000000000000000431220c84f0e31be728fd03e286d3713fc5fc4337459d3ab3316b2c83bb3b418d6e1db4fdb26b6198e77f9e3617ab1475b80c5bba076fc80f00780294f11e6f94138bcf879e8cafcb6b4ce9102d61f8529e38aeeb152edaebf7d17dac34f5183f977871959bc447580b778a1f2ba8213"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 11:03:58 executing program 3: syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) syzkaller login: [ 60.264912] ------------[ cut here ]------------ [ 60.311486] WARNING: CPU: 1 PID: 2446 at arch/x86/mm/pat.c:1017 untrack_pfn+0x214/0x270() [ 60.347937] Kernel panic - not syncing: panic_on_warn set ... [ 60.347937] [ 60.355344] CPU: 1 PID: 2446 Comm: syz-executor.0 Not tainted 4.4.174+ #17 [ 60.362351] 0000000000000000 49cab8c34a371013 ffff8801c0f77740 ffffffff81aad1a1 [ 60.370438] 0000000000000000 ffffffff82835ee0 ffffffff82831440 00000000000003f9 [ 60.378858] ffffffff810b6b24 ffff8801c0f77820 ffffffff813a48c2 0000000041b58ab3 [ 60.386961] Call Trace: [ 60.389547] [] dump_stack+0xc1/0x120 [ 60.394909] [] ? untrack_pfn+0x214/0x270 [ 60.400630] [] panic+0x1b9/0x37b [ 60.405648] [] ? add_taint.cold+0x16/0x16 [ 60.411449] [] ? follow_phys+0x1f9/0x2e0 [ 60.417165] [] ? warn_slowpath_common.cold+0x5/0x20 [ 60.423843] [] warn_slowpath_common.cold+0x20/0x20 [ 60.430521] [] ? depot_save_stack+0x1c3/0x5f0 [ 60.436881] [] warn_slowpath_null+0x2a/0x30 [ 60.442852] [] untrack_pfn+0x214/0x270 [ 60.448387] [] ? track_pfn_insert+0x100/0x100 [ 60.454532] [] ? save_stack_trace+0x26/0x50 [ 60.460502] [] ? kasan_kmalloc+0xb7/0xd0 [ 60.466214] [] ? kasan_slab_alloc+0xf/0x20 [ 60.472109] [] ? kmem_cache_alloc+0xdc/0x2c0 [ 60.478167] [] ? ptlock_alloc+0x20/0x80 [ 60.483792] [] ? pte_alloc_one+0x69/0x110 [ 60.489586] [] ? __pte_alloc+0x26/0x1e0 [ 60.495211] [] ? move_page_tables+0x42e/0xcc0 [ 60.501359] [] ? move_vma+0x27f/0x920 [ 60.506811] [] ? SyS_mremap+0x9dd/0xd60 [ 60.512437] [] ? do_fast_syscall_32+0x32d/0xa90 [ 60.518756] [] unmap_single_vma+0xe2e/0x1090 [ 60.524820] [] ? vm_normal_page+0x300/0x300 [ 60.530794] [] ? lru_add_drain_cpu+0x165/0x390 [ 60.537030] [] ? lru_cache_add_active_or_unevictable+0x120/0x120 [ 60.544828] [] unmap_vmas+0x48/0xa0 [ 60.550102] [] unmap_region+0x1a9/0x320 [ 60.555728] [] ? validate_mm_rb+0xb0/0xb0 [ 60.561536] [] ? vma_compute_subtree_gap+0x1f0/0x1f0 [ 60.568724] [] ? vma_rb_erase+0x429/0xa30 [ 60.574523] [] ? vma_compute_subtree_gap+0x190/0x1f0 [ 60.582491] [] do_munmap+0x4ca/0xcf0 [ 60.587855] [] move_vma+0x50e/0x920 [ 60.593129] [] ? move_page_tables+0xcc0/0xcc0 [ 60.599274] [] ? vmacache_update+0x101/0x130 [ 60.605330] [] ? selinux_mmap_addr+0x20/0xf0 [ 60.611385] [] ? security_mmap_addr+0x7f/0xb0 [ 60.617614] [] ? get_unmapped_area+0x238/0x310 [ 60.623853] [] SyS_mremap+0x9dd/0xd60 [ 60.629304] [] ? move_vma+0x920/0x920 [ 60.634754] [] ? compat_SyS_clock_gettime+0x162/0x1f0 [ 60.641623] [] ? compat_SyS_clock_settime+0x1b0/0x1b0 [ 60.648462] [] ? do_fast_syscall_32+0xd6/0xa90 [ 60.654781] [] ? move_vma+0x920/0x920 [ 60.660231] [] do_fast_syscall_32+0x32d/0xa90 [ 60.666376] [] sysenter_flags_fixed+0xd/0x1a [ 60.673064] Kernel Offset: disabled [ 60.676742] Rebooting in 86400 seconds..