{0x0, 0x7f, 0xfffffffffffffffa, 0x4, 0x7, 0x2}], [{0x5, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x28d24837950ae0b1}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x3}, {0x7}, {0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x7}, {0x3, 0x1}, {0x4}, {0x2}, {0x7, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x7, 0x445c50d893d91e99}, {0x2}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x7, 0x1}, {0x5}, {0x6}, {0x1, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xa6, 0x8000, 0x3, 0xfff, 0xc0c}, 0x9, 0x655ecbb1, [{0xfffffffffffffffd, 0x400, 0xee1, 0x2, 0x7fff, 0x1}, {0x5f7, 0x1ff, 0xff, 0x1, 0x80000000, 0x72ed}, {0x9, 0x5, 0x80, 0x6, 0x9, 0x23}, {0x5, 0x1000, 0x20, 0xe5b0, 0x7, 0x5}, {0x100000001, 0x7fff, 0x9, 0x1, 0xfffffffffffffffa, 0xf29}]}, [{0x2, 0x101, 0x3, 0x1, 0x1, 0x6}, {0x80000001, 0x8, 0xd6f, 0x200, 0x0, 0x100}, {0xfffffffffffffff9, 0x200000000, 0xe6e, 0x186c, 0x3, 0x7}, {0x1ff, 0x7f800, 0x3, 0x9, 0x7, 0x1}, {0xffffffffffff8001, 0x6, 0x3, 0x8, 0xa2f, 0xfffffffffffff570}, {0x8, 0x1, 0x2, 0x0, 0x2895, 0x9}, {0x8, 0x98, 0x0, 0x2, 0x7fffffff, 0x8001}, {0x0, 0x2, 0x7fff, 0x0, 0x3ff, 0x6}, {0x3da9, 0x3, 0xe4, 0x0, 0x8, 0x67f07b11}, {0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {0x1, 0x896, 0x7fffffff, 0x3, 0x1, 0x89}, {0x20, 0x6, 0x400, 0x4, 0xab, 0x7ff}, {0x81, 0x2a, 0x7fff, 0xd37, 0x2, 0x7fff}, {0x8, 0x400, 0x5, 0x1f, 0x3, 0x9}, {0x0, 0x7, 0x80000001, 0x80, 0x6a, 0xfffffffffffffffa}, {0x5, 0x0, 0x9, 0x7f, 0x5, 0x5}, {0xcf, 0x7fffffff, 0x5, 0x4, 0x79134d43, 0x3ff}, {0x1, 0x8, 0x8, 0x8, 0x3f, 0xfff}, {0xffffffff, 0x8, 0x9, 0x3, 0x40, 0x7f}, {0xec, 0x4, 0x200, 0x3, 0xa2, 0xa55}, {0x1, 0x19, 0x2, 0x1, 0x3, 0x2}, {0x1e, 0x6, 0xa72, 0x6, 0x8491, 0xffffffffffffee98}, {0x9, 0x1588, 0x8, 0x0, 0x5, 0x7f}, {0x7a3200, 0x1, 0xc00, 0xf954, 0x9, 0x7f}, {0x9, 0x408, 0x7, 0x400, 0x2, 0x3}, {0x351, 0x400, 0x1, 0xb94f, 0x40, 0x7}, {0x1, 0xb6, 0x14e, 0xfff, 0x6, 0x2}, {0x9, 0x7, 0xffff, 0x3, 0x2, 0x1}, {0x3ff, 0x7, 0x2c86, 0x1, 0x4, 0x80}, {0x2, 0x7930, 0x9, 0x0, 0x2, 0x100}, {0x7, 0x9, 0x3, 0x5b49, 0xb, 0x7}, {0xff5, 0x5, 0x2f3, 0x8000, 0x0, 0x8}, {0x3, 0x3, 0x0, 0x401, 0x7ff, 0xff}, {0xec, 0x3ee75497, 0x100000001, 0x5, 0x9b, 0x7}, {0x0, 0x7fffffff, 0x6, 0x10000, 0x7c6, 0x6}, {0x6, 0x4, 0x1f, 0xb351, 0x5, 0x4}, {0x77, 0x8, 0x401, 0x100000001, 0xc77f}, {0x796, 0x6, 0x3ff, 0x0, 0x1000, 0xb388}, {0x0, 0x0, 0x1ff, 0x1ff, 0x0, 0x1}, {0x6, 0x2, 0x3, 0x5, 0x100000001, 0x7fffffff}, {0x1, 0x500, 0x10000, 0x0, 0x1, 0x6}, {0x1be0, 0x0, 0x0, 0x8, 0x7, 0x7}, {0xfffffffffffffffb, 0x2, 0x4458d8ea, 0x40, 0x20, 0x6}, {0x9, 0x844, 0x6, 0x10000, 0x7fff, 0x3f}, {0x3e59, 0xae, 0x0, 0xfffffffffffffff8, 0x2e15, 0xdcbe}, {0x80, 0x1, 0x2, 0x3ff, 0x9, 0x5}, {0x6497, 0x100, 0x6, 0x1, 0x5}, {0x10000, 0x2, 0x7fffffff, 0xffffffffffffed8c, 0x3, 0xfe18}, {0x8, 0x101, 0x2, 0x1000, 0x0, 0x1e}, {0x2, 0x4, 0xff, 0x6, 0x8000, 0xff}, {0x1, 0x800, 0x400, 0x5, 0x0, 0x6}, {0x8, 0x0, 0x7, 0x9, 0x5}, {0x3, 0x27, 0x1, 0x0, 0x43, 0x9}, {0x2, 0x1, 0x6, 0xffffffff, 0x2, 0x1000}, {0x2, 0x0, 0x100, 0x80, 0x30d7, 0x5}, {0x2, 0x4, 0x9, 0x7c000000000000, 0x9bd, 0x7}, {0xb677, 0x1, 0x9, 0x8001, 0x1, 0x1}, {0x100000001, 0x5, 0x0, 0x8, 0x9, 0xff}, {0xfa, 0x1, 0x8, 0x55e8, 0x3f, 0x9}, {0xafa8, 0x8, 0x400, 0x100, 0x8e, 0x3}, {0x50fb, 0x80000000, 0x1000, 0x5, 0x1, 0xbdd3}, {0xffffffff00000001, 0x5, 0x2, 0x400, 0x7, 0xff}, {0x3f, 0x7, 0x2301, 0xc4e4, 0x200, 0x7fffffff}, {0x5, 0x10000, 0x9, 0x5, 0x3, 0x7fff}, {0xbd9e, 0x9, 0x7, 0x100000001, 0x80000000, 0x5}, {0xa5e3, 0x81, 0x4, 0x1f, 0xfffffffffffffffe, 0x1c}, {0x40, 0x1000, 0xff, 0x80000000, 0x1, 0x6}, {0x3, 0xffff, 0x4, 0x40, 0x746a5016, 0x4}, {0x6, 0x9, 0x8, 0x4, 0x6}, {0x400, 0x754, 0x2, 0x3, 0x5, 0x1000000000000}, {0xffff, 0x3, 0x100000001, 0x80000000, 0xe5b, 0x28bb4746}, {0x54, 0x8, 0x10001, 0x2, 0x7, 0x7}, {0x1f, 0xfffffffffffff801, 0x0, 0x0, 0xf271, 0x9}, {0x0, 0x7, 0x6, 0x6a64, 0x7fffffff, 0x4}, {0x7, 0x7fffffff, 0x3, 0x5, 0xb8, 0x100000000}, {0x1f, 0x3ff, 0x101, 0x4313c204, 0x3ff, 0x7fff}, {0x401, 0x2, 0x5, 0x8, 0x4, 0x100}, {0x0, 0x100, 0x595e, 0x7, 0x23, 0xffffffffffffffff}, {0x8000, 0x5, 0x3f, 0x1, 0x100000000, 0x7ff}, {0x3, 0xec, 0x1, 0x40, 0x9, 0x20}, {0xffffffffffffff26, 0x1000, 0x3, 0x7fff, 0x9c23, 0x8}, {0x77f4c79b, 0x5, 0x7, 0x32f, 0xffffffffffffff49, 0xffffffff}, {0x4, 0x7, 0x3, 0xfff, 0x4, 0x1ff}, {0x2000000020000, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, {0x7ff, 0x7f, 0x2c, 0x1e9b, 0x16, 0x6}, {0x8, 0x1, 0x174, 0x7, 0x1, 0x91}, {0x100000000, 0x7ff, 0x0, 0x4, 0x5, 0x5}, {0x4, 0x9, 0x9949, 0x7, 0x7, 0x3}, {0x101, 0x0, 0x7fffffff, 0x4, 0x9, 0x5}, {0x3, 0x28, 0x0, 0x4, 0x0, 0x8}, {0x4, 0x6, 0x43, 0x6, 0x1, 0xffffffffffff6703}, {0x6, 0x6, 0x0, 0x80, 0x4aa, 0x905}, {0x5, 0x0, 0x7ff, 0x0, 0x8, 0x9}, {0x8, 0xfff, 0x9274, 0xfd, 0x2, 0xfffffffffffff4bf}, {0x9, 0x2, 0x7f, 0x7, 0x5, 0x401}, {0x7, 0xfffffffffffffff9, 0x2, 0x2, 0x100000001, 0x3ff}, {0xe985, 0x9, 0xfffffffffffffffb, 0x1000, 0xf9, 0x3}, {0x6, 0xd99d, 0x1, 0x5b, 0x8001}, {0x3, 0x3ff, 0x1ff, 0x8, 0x3, 0xbda3e79}, {0x6c00000000, 0x1ff, 0x8, 0x8001, 0x4, 0x6}, {0x200, 0x7, 0x800, 0x3, 0x9, 0x8}, {0x4, 0x7, 0x4, 0x3, 0x100, 0x5}, {0x10000, 0x0, 0x835, 0x1, 0x7, 0x4}, {0x6, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x80000001, 0x1, 0x7fffffff}, {0x3ff, 0x1ff, 0x78969992, 0x1, 0xfffc000000000000, 0x8}, {0x9, 0xffffffffffff129b, 0x5, 0x1, 0x0, 0x3}, {0x4, 0x1, 0x5, 0x94, 0x1, 0xfffffffeffffffff}, {0x0, 0x0, 0xfffffffffffffff8, 0xada, 0x8, 0x436}, {0x7, 0x8, 0x7fff, 0x7, 0x5, 0x7}, {0x1, 0xff, 0x0, 0x9, 0xfff, 0x9}, {0x0, 0x1, 0x2, 0x3, 0x4, 0x5}, {0x7ec, 0x5, 0x8, 0x101, 0x200}, {0xffffffffffffffe1, 0x3, 0xfffffffffffff8ce, 0xcb, 0x1f, 0x7f}, {0x101, 0x200, 0x0, 0x80000001, 0x8, 0x5}, {0x8, 0x3, 0x0, 0x4, 0x80000001, 0x6}, {0x9, 0x800, 0x2692589d, 0x6, 0x2, 0x6f6}, {0x7fff, 0x6, 0x40, 0x7, 0x3, 0x8}, {0x4, 0x2, 0x6, 0x10001, 0xb92, 0x2752}, {0x80, 0x80000001, 0x0, 0x3f, 0xee, 0x1000}, {0x0, 0xfff, 0x4, 0x974, 0x37, 0x10000}, {0xffffffffffffffe1, 0x3, 0xc5fc, 0x1000, 0x1f, 0x5}, {0x100000001, 0x7, 0x7, 0x1f, 0x10001, 0x9}, {0x8, 0xfffffffffffffff9, 0x8, 0x7, 0x3, 0x8000}, {0xd6, 0x100000000, 0x9, 0x8, 0x800, 0x3}, {0x100000000, 0x20, 0x7f3, 0x7, 0x7f, 0x1000}, {0x9c1cdc, 0x2, 0x8001, 0xfffffffffffffffa, 0x8, 0x3}, {0x8, 0x7, 0xcc47, 0x1, 0x1, 0x9}, {0x9, 0x0, 0x40de, 0x5, 0x10001, 0x4}], [{0x4, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x7}, {0x7}, {0x3}, {0x4, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x7}, {0x3}, {0x5}, {0x5, 0x1}, {0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x4557767f86096927}, {0x2, 0x1}, {0x7}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x7}, {0x4}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x7}, {0x2, 0x1}, {0x1fd4463e4319c635, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x7}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x37027270f229ec35}, {0x4, 0x1}, {0x3, 0x1}, {0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x5}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, [@TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}]}]}, {0x7c, 0x6, "bb07ad5ac3ab24758ba3b5fd61bd1485f0cc45d0fa3ad477a7386701ca1e1e95dea383c711dda16d09f1c7bdfdb42319a2bcfad06367b0bd77a981c2ba54edd9afd5b1bf0060af3eb393bc6161c9995c91caee40876e9ada83c16391d9aed99e15f3e741eb1a9c129b99a0802dfa3fb06f923ecf6f17"}}}}, {0x11c, 0x1, @m_sample={0x118, 0x13, {{0xc, 0x1, 'sample\x00'}, {0x3c, 0x2, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x6, 0x10000000, 0xe106, 0xfff}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xf63, 0x20000006, 0x0, 0x10ec}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0xc8, 0x6, "6d88af0740cfa5d3cd5cab328528b5db436639598613499823268f85ee966c9f73ac0a775da386273a09de7615ead6cb1718d2aeb927f737b5852e6fe427924210f5daf1107dd1e7ed73c960beeb9cdb723d4d6da1ba3c1a695e8902155bff2ece8ec22db90653544b6069082da8e97821f19085fd47c6eb2b7c6ae0b92a823da03dfd1095345e8cbec44864ef69604ad80e3d70f0e67258582dc6fbdaca1ecccef76c522cfe79854e7c6260b7342c2481b9dcdd63a59d41af48f5a92076e24805e269"}}}}]}, 0x4c20}, 0x1, 0x0, 0x0, 0x4804}, 0x8000) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) [ 530.112056] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 530.355971] audit: type=1400 audit(1538147433.614:27278): avc: denied { map } for pid=24205 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:34 executing program 3: mkdir(&(0x7f0000000140)='./file0/\x00', 0x102) unlink(&(0x7f0000000040)='./file0/\x00') r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x210000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x20, 0x32, 0x0, r1}, {0x17, 0xf1, 0xfffffffffffeffff, 0xbc, 0x7, 0x1, 0x4, 0x4}, {0xfffffffffffffffb, 0xb6, 0x6, 0x843}, 0x3, 0x6e6bbf, 0x2, 0x1, 0x3530032cf3d7dfea, 0x1051c4e7d4fe9f66}, {{@in=@broadcast, 0x4d4, 0xff}, 0xa, @in6=@mcast1, 0x3502, 0x6, 0x0, 0x7, 0x8, 0xf8, 0x10001}}, 0xe8) [ 530.427734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 530.427741] audit: audit_lost=1020 audit_rate_limit=0 audit_backlog_limit=64 [ 530.427746] audit: backlog limit exceeded [ 530.445046] audit: audit_backlog=65 > audit_backlog_limit=64 15:10:34 executing program 5: unlink(&(0x7f0000000040)='./file0/\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x10, 0x9, 0x3}) [ 530.617298] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 530.617306] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:35 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 530.620773] attempt to access beyond end of device [ 530.620783] loop0: rw=12288, want=8200, limit=20 15:10:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 530.620826] attempt to access beyond end of device [ 530.620833] loop0: rw=12288, want=12296, limit=20 [ 530.620860] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 530.621346] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:10:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.SMACK64EXEC\x00', &(0x7f00000001c0)=']*system\x00', 0x9, 0x1) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x2001001, &(0x7f00000003c0)=ANY=[]) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)) execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)="f76b657972696e672c2600", &(0x7f0000000280)="0000000080"], &(0x7f0000000340)=[&(0x7f0000000300)="2f7df55d6367726f75706367726f7570286b657972696e672f00"]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) [ 530.621359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:35 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') r0 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80, 0x80000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x3, 0x8, 0x8, 0x337ad1b, 0x7, 0x8000}, 0x1c) [ 530.621512] attempt to access beyond end of device [ 530.621521] loop0: rw=12288, want=8200, limit=20 [ 530.621561] attempt to access beyond end of device 15:10:35 executing program 5: unlink(&(0x7f0000000100)='./file0/\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x2}, 0x28, 0x2) [ 530.621568] loop0: rw=12288, want=12296, limit=20 [ 530.621593] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 15:10:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 530.714397] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 530.714406] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 530.717911] attempt to access beyond end of device 15:10:35 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 530.717921] loop0: rw=12288, want=8200, limit=20 [ 530.717964] attempt to access beyond end of device [ 530.717971] loop0: rw=12288, want=12296, limit=20 [ 530.717996] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 15:10:36 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) [ 530.718183] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 530.718338] attempt to access beyond end of device 15:10:36 executing program 5: unlink(&(0x7f0000000080)='./file0/\x00') link(&(0x7f0000000000)='./file0/\x00', &(0x7f0000000040)='./file0/\x00') [ 530.718346] loop0: rw=12288, want=8200, limit=20 [ 530.718386] attempt to access beyond end of device [ 530.718394] loop0: rw=12288, want=12296, limit=20 [ 530.783851] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 15:10:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 531.379748] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 531.406851] attempt to access beyond end of device 15:10:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000bc0)=""/4096) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') utimensat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000011,mode=00000000000000000000010,mode=00000000000000000000060,mode=00000000000000000000003,mode=00000000000000000000006,mode=00000000000000000000011,mode=00000000000000000000040,fowner<', @ANYRESDEC=r2, @ANYBLOB="1901"]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB="636f6d6d2a57d2df"]) [ 531.406865] loop0: rw=12288, want=8200, limit=20 [ 531.406912] attempt to access beyond end of device [ 531.406921] loop0: rw=12288, want=12296, limit=20 [ 531.407286] attempt to access beyond end of device 15:10:36 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 531.407294] loop0: rw=12288, want=8200, limit=20 [ 531.407334] attempt to access beyond end of device [ 531.407342] loop0: rw=12288, want=12296, limit=20 15:10:36 executing program 5: [ 531.930109] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 532.086331] attempt to access beyond end of device 15:10:36 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs, &(0x7f0000000000)=0x80) recvfrom$unix(r0, &(0x7f0000000100)=""/231, 0xe7, 0x10000, &(0x7f0000000200)=@file={0x1, './file0/\x00'}, 0x6e) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x10) [ 532.086342] loop0: rw=12288, want=8200, limit=20 [ 532.086396] attempt to access beyond end of device [ 532.086404] loop0: rw=12288, want=12296, limit=20 15:10:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 532.086784] attempt to access beyond end of device [ 532.086793] loop0: rw=12288, want=8200, limit=20 [ 532.086834] attempt to access beyond end of device [ 532.086841] loop0: rw=12288, want=12296, limit=20 15:10:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d", 0x31, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 532.652783] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 532.805413] attempt to access beyond end of device [ 532.854254] loop0: rw=12288, want=8200, limit=20 [ 532.885347] attempt to access beyond end of device 15:10:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) socketpair$inet(0x2, 0x6, 0x4, &(0x7f0000000080)) [ 532.917527] loop0: rw=12288, want=12296, limit=20 15:10:37 executing program 5: lsetxattr$security_selinux(&(0x7f0000000000)='./file0/\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bind(r0, &(0x7f0000000140)=@in={0x2, 0x4e22, @loopback}, 0x80) unlink(&(0x7f0000000040)='./file0/\x00') [ 532.961355] attempt to access beyond end of device [ 532.996994] loop0: rw=12288, want=8200, limit=20 [ 533.021062] attempt to access beyond end of device 15:10:37 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)) fchmodat(r0, &(0x7f0000000080)='./file0/\x00', 0x40) [ 533.044641] loop0: rw=12288, want=12296, limit=20 15:10:37 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 533.322874] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 15:10:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d", 0x31, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:37 executing program 5: unlink(&(0x7f0000000040)='./file0/\x00') r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)={0xab, 0x29, 0x1, {0x8001, [{{0x83, 0x3}, 0x100, 0x0, 0x8, './file0/'}, {{0xa1, 0x3, 0x8}, 0xcc01, 0x8, 0x8, './file0/'}, {{0x2, 0x1000, 0x5}, 0x1, 0x5, 0x8, './file0/'}, {{0x41, 0x4}, 0x1, 0x2, 0x8, './file0/'}, {{0x4, 0x1}, 0x18, 0x6, 0x8, './file0/'}]}}, 0xab) 15:10:38 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000200)='./file0//file0\x00') symlink(&(0x7f0000000000)='./file0//file0/../file0\x00', &(0x7f0000000040)='./file0/\x00') 15:10:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:38 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 533.929568] keychord: Insufficient bytes present for keycount 165 [ 533.998024] keychord: Insufficient bytes present for keycount 165 [ 534.045772] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 15:10:38 executing program 5: unlink(&(0x7f0000000000)='./file0//file0\x00') r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001540)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000001400)={@dev, 0x0}, &(0x7f0000001440)=0x14) bind$packet(r0, &(0x7f0000001480)={0x11, 0x0, r2, 0x1, 0x8, 0x6, @remote}, 0x14) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000013c0)={@local, @rand_addr=0x7, r2}, 0xc) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x20018) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1, 0xa, &(0x7f0000000240)=@raw=[@generic={0x0, 0x2, 0x1, 0x6}, @alu={0x7, 0x1, 0x2, 0x0, 0x2, 0x20, 0x8}, @ldst={0x0, 0x3, 0x6, 0x9, 0x6, 0xfffffffffffffff8, 0x8}, @map={0x18, 0x5, 0x1, 0x0, r0}, @map={0x18, 0x6, 0x1, 0x0, r1}], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x0, [], 0x0, 0x5}, 0x48) r3 = socket$inet(0x2, 0x7, 0x2) recvmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/221, 0xdd, 0x7}, 0x2100) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) 15:10:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d", 0x31, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 534.328954] kauditd_printk_skb: 596 callbacks suppressed [ 534.328963] audit: type=1400 audit(1538147438.604:27453): avc: denied { map } for pid=24350 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:38 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f00000000c0)='./file0/\x00') lsetxattr$security_ima(&(0x7f0000000040)='./file0//file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@v2={0x5, 0x0, 0xb, 0xfffffffffffffffa, 0x62, "badbd565196067f95dff9cd9785f207220e09644e42596e09cf1dc86f3e6cf398d24aebb148230c7f6c646eef7120ed389471d4a7526109da0fcb49a774de8e39214edfe34407fd8e938825e15dcdf0e17303ee671d1dc2fe99ac13d836afd0ee944"}, 0x6c, 0x2) mkdir(&(0x7f0000000000)='./file0//file0\x00', 0x84) 15:10:38 executing program 4: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x4000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x320, 0x558, 0x320, 0x0, 0x1c8, 0x668, 0x668, 0x668, 0x668, 0x668, 0x6, &(0x7f0000000180), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x18}, @empty, [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'sit0\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x101, 0x4}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0xaf, 0x7f, 0x1f, 0x0, 0x8001000000000000, @mcast2, @ipv4={[], [], @loopback}, @dev={0xfe, 0x80, [], 0x20}, [0xff0000ff, 0xffffff00, 0x0, 0xffffffff], [0xff, 0x0, 0xffffffff], [0xff, 0x0, 0xff, 0xff000000], 0x40, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv6, 0xa, 0x20, 0x4}}}, {{@ipv6={@loopback, @empty, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'ip6_vti0\x00', 'veth1_to_team\x00', {}, {0xff}, 0xbb, 0x1e, 0x1, 0x1}, 0x0, 0x120, 0x158, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x0, 0xffffffffffffffff, 0x378, 0x34, 0x3}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x7, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x80000001, 0x4, 0x7}, {0x7, 0x101, 0x6}, {0xffffffffffffff1c, 0x6, 0x7}, 0x5, 0x5}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d3, 0xfff, 0x40b, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, [], 0x1c}, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0xffffffff, 0xff0000ff], 'erspan0\x00', 'veth0\x00', {0xff}, {}, 0x7, 0x177a1968, 0x3, 0x9}, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv6=@ipv4={[], [], @remote}, 0x37, 0x15, 0xfffffffffffff001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x798) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000100)=ANY=[@ANYBLOB="30097592aff3a2b473cfa209ca27"]) 15:10:38 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 534.547112] audit: type=1400 audit(1538147438.624:27454): avc: denied { map } for pid=24350 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 534.746163] audit: type=1400 audit(1538147438.634:27455): avc: denied { map } for pid=24349 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a00000000000000000100", 0x4a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 534.844788] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 534.945549] audit: type=1400 audit(1538147438.644:27456): avc: denied { map } for pid=24349 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:39 executing program 3: gettid() mkdir(&(0x7f0000000000)='./file0/\x00', 0x88) unlink(&(0x7f0000000040)='./file0/\x00') 15:10:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 535.113473] audit: type=1400 audit(1538147438.644:27457): avc: denied { map } for pid=24350 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:39 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) 15:10:39 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400), 0x0, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:39 executing program 5: unlink(&(0x7f0000000100)='./file0/\x00') [ 535.186679] audit: audit_backlog=65 > audit_backlog_limit=64 [ 535.186685] audit: audit_lost=1162 audit_rate_limit=0 audit_backlog_limit=64 [ 535.186690] audit: backlog limit exceeded [ 535.188022] audit: audit_backlog=65 > audit_backlog_limit=64 15:10:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a00000000000000000100", 0x4a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 535.188028] audit: audit_lost=1163 audit_rate_limit=0 audit_backlog_limit=64 [ 535.548855] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:40 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000008dc0)='/dev/keychord\x00', 0x80000, 0x0) r1 = accept$packet(r0, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002640)=0x14) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008d40), &(0x7f0000008d80)=0x4) setitimer(0x2, &(0x7f0000008e00)={{0x77359400}, {0x77359400}}, &(0x7f0000008e40)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) recvmmsg(r2, &(0x7f0000008ac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000100)=""/97, 0x61}], 0x2, &(0x7f00000001c0)=""/64, 0x40, 0x2}, 0x200}, {{&(0x7f0000000200)=@ax25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000500)=""/237, 0xed}], 0x6, &(0x7f0000000680)=""/41, 0x29, 0x9}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/175, 0xaf}], 0x1, &(0x7f00000007c0)=""/191, 0xbf, 0x3}, 0x7}, {{&(0x7f0000000880)=@nfc, 0x80, &(0x7f0000001100)=[{&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000b00)=""/4, 0x4}, {&(0x7f0000000b40)=""/226, 0xe2}, {&(0x7f0000000c40)=""/185, 0xb9}, {&(0x7f0000000d00)=""/225, 0xe1}, {&(0x7f0000000e00)=""/165, 0xa5}, {&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/255, 0xff}], 0xa, &(0x7f00000011c0)=""/130, 0x82, 0x1b}, 0xa3c}, {{&(0x7f0000001280)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001300)=""/131, 0x83}, {&(0x7f0000002400)=""/224, 0xe0}, {&(0x7f0000002500)=""/110, 0x6e}, {&(0x7f0000002580)=""/40, 0x28}, {&(0x7f00000025c0)=""/83, 0x53}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/152, 0x98}, {&(0x7f0000002740)=""/254, 0xfe}, {&(0x7f0000002840)=""/208, 0xd0}, {&(0x7f0000002940)=""/109, 0x6d}], 0xa, &(0x7f0000002a80)=""/12, 0xc, 0x1ac}}, {{&(0x7f0000002ac0)=@un=@abs, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/71, 0x47}, {&(0x7f0000003bc0)=""/51, 0x33}], 0x3, &(0x7f0000003c40)=""/230, 0xe6, 0x4d}}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/197, 0xc5}, {&(0x7f0000004e40)=""/89, 0x59}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/154, 0x9a}], 0x5, &(0x7f0000006000)=""/96, 0x60, 0x100000001}, 0x3}, {{&(0x7f0000006080), 0x80, &(0x7f0000007600)=[{&(0x7f0000006100)=""/253, 0xfd}, {&(0x7f0000006200)=""/74, 0x4a}, {&(0x7f0000006280)=""/215, 0xd7}, {&(0x7f0000006380)=""/252, 0xfc}, {&(0x7f0000006480)=""/182, 0xb6}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/183, 0xb7}], 0x7}, 0x623c64e9}, {{0x0, 0x0, &(0x7f0000008a00)=[{&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/218, 0xda}, {&(0x7f0000008780)=""/227, 0xe3}, {&(0x7f0000008880)=""/203, 0xcb}, {&(0x7f0000008980)=""/117, 0x75}], 0x5, &(0x7f0000008a80)=""/48, 0x30, 0x7}, 0x7ff}], 0x9, 0x10020, &(0x7f0000008d00)={0x77359400}) [ 535.805831] f2fs_msg: 44 callbacks suppressed 15:10:40 executing program 5: unlink(&(0x7f0000000200)='./file0\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x90100, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{0x400000ae4}, {0x3f, 0x6}, {0x7fffffff, 0x5}, {0x0, 0x6}, {0xc9, 0x3}, {0x0, 0x504438e2}, {0x3, 0xec9c}, {0x3, 0x2000000000}, {0x5, 0x1}]}) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x1, 0x2, 0x1ff, 0x9, 0x0, 0x400, 0x24020, 0x1, 0x8, 0x101, 0x1, 0x5, 0x3, 0x80000001, 0x81, 0x6, 0x8, 0x80000001, 0x5f9, 0x8001, 0x4, 0x7, 0x8, 0x7fffffff, 0x8, 0x80000000, 0x6, 0x2ef, 0xfffffffffffffff8, 0x4, 0x4, 0x329d, 0x10000, 0x4, 0x800, 0x8, 0x0, 0x5f3b, 0x7, @perf_bp={&(0x7f0000000100), 0x2}, 0x10000, 0x100, 0x8, 0x3, 0x5, 0x1, 0x6}, r1, 0x5, r0, 0x3) [ 535.805841] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 535.859859] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 535.943771] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 535.990456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 15:10:40 executing program 4: mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000940)=0xe8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x4, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="b09e2153f3df8f37bd11afba8f6301bb2538dae4a6c3de2926a23a335c834c057b59458b68053b75b2acd440c4748c96e2b60af40b0b4fc07da6ce11c034e00fe0366a2ace5a861f8e97b4e3d424d6250dc87d974457aa5140365675a6c8239650712de4d21eb33c118fe73fdb77aed48728b0762dc6863be67ca8ed4aa4171a0c", 0x81, 0x100000001}], 0x0, &(0x7f0000000980)={[{@usrquota='usrquota'}, {@noquota='noquota'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'nodots'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, 'bpf\x00'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r0}}, {@dont_measure='dont_measure'}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}]}) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x7, 0x6, &(0x7f00000005c0)=[{&(0x7f00000001c0)="4d59051d8470574913db96648d39785681fc8363947a4c12032aea23452d4f5445b74980351c0661aba90cb27acedcc57e1987199cc6dcefa58e4d934f1d6c3825a0329101cac1355163701071de84bf75e007cf9969b714e650a22b8f000a83c274bebf3ddb7209a57fd35f84a1947343c3ca3ca6a419c7dc8edf0573d593fe72ae9c52c41cc3f69e0891397e734bee8ff38301afe85bce753d258f00bf358311f5d442080ad46179cc5d965a4f0400cf7ab13e560c6f3ace7939c080148637c2dd5a1076e444c91e8e208387d255e206348c", 0xd3, 0x1ff}, {&(0x7f00000002c0)="59dc446313a20ffe671ca3c34fa75bb99e5cde9a4e00cbdf618e9ca83b3a358d6a41f573ae04608948be2cf43d5b402d6e38a548fe7240af34de6494dba91628a6111541efbf7b33ffc2a7e3d823e92bde440ed60592958b622bf642a80a99b8781fe1e0be68a90bb49414c517f891e929fb9aeb6a3d34dff7b067e56502292edefe15329adddf3444baa10f804ee7f0be78476767", 0x95, 0x192}, {&(0x7f0000000380)="ffb9a9e0c2a8184bcd4a4305f7e24fa12ad516320c1921b81916ee5c334c9aa6068f248e4f4b609d9597fbaf86b45bae235aeabf0ea96858336ce32520ead115fa9596b7f322c4a88e42bb7636111ae2303b8e8fa6396ec91bd6f5fa455120eb9d4934d0c9653073647fc9fe79f4b0f69119f5a8848f7622bf9cbd756d1d2ad121289f3026d23c9dab23a84900eb", 0x8e, 0x3f}, {&(0x7f0000000440)="5140f14a0c9c24fe29cbcb70edaa02af4e0e13b1712a0b25cc5b95809321ce2bbe8696700cdbf14cddfc67f019047095501d3797883a5708777414815c07ee3635e7a11c83d89fe172fdc4e1cfe745", 0x4f, 0xfe1}, {&(0x7f00000004c0)="b7675654972f1e4074af91cda4396b722c1e0ecd8c1eb1af64f0fc326c141b0e09ce956e5edc2f32e8932732ab8530e3f047424f58ad4cb3bae4d824ae97bdaa17e414e40430522f36fe4e0f95d656863d24656e81836728950edeedca9fbe309a9b2a09fbb7", 0x66, 0x3894}, {&(0x7f0000000580), 0x0, 0x7fff}], 0x80000, &(0x7f0000000680)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@sys_immutable='sys_immutable'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}], [{@smackfsroot={'smackfsroot', 0x3d, 'ppp1em1:%,userselinux'}}]}) open(&(0x7f0000000080)='./file0\x00', 0xac8c0ac794e7d65, 0x40) [ 536.046979] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 536.114914] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a00000000000000000100", 0x4a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 536.139186] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:40 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x1) unlink(&(0x7f0000000000)='./file0/\x00') r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x40, 0x8, 0x5}, 0x10) [ 536.282489] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:10:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 536.324641] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 15:10:40 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400), 0x0, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:40 executing program 5: unlink(&(0x7f0000000000)='./file0/\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0xbe75ec8b5df7683c, 0x70, 0x7, 0x3, 0x100000001, 0x9, 0x0, 0x7f, 0x40, 0x8, 0x7, 0x8, 0x6, 0x80, 0x20, 0x2, 0x2, 0x6, 0x67, 0x2, 0x10001, 0x9, 0x6b, 0x1ff800, 0xff, 0xf55c, 0x8, 0x7, 0x7, 0x7, 0x401, 0x0, 0x7, 0x4, 0x6, 0x4, 0x80000000, 0xebf, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x200, 0x2, 0xd0a, 0x3, 0x2, 0x8000, 0xffffffff}, r0, 0x9, 0xffffffffffffff9c, 0x9) [ 536.713427] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:41 executing program 4: openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) r0 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x6, &(0x7f0000000440)=""/16, 0x10, 0x10001}, 0x7}, {{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)=""/183, 0xb7}], 0x1, &(0x7f0000000640)=""/175, 0xaf, 0x6}, 0x672aa5ba}], 0x2, 0x40000000, &(0x7f00000007c0)={r1, r2+10000000}) 15:10:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000", 0x56, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:41 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) unlink(&(0x7f0000000080)='./file0/\x00') ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) unlink(&(0x7f0000000040)='./file0/\x00') [ 536.885370] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 536.960726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:41 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400), 0x0, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:41 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/null\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x5, 0x878, [0x20000240, 0x0, 0x0, 0x200004a8, 0x20000830], 0x0, &(0x7f0000000140), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x2, 0x88ff, 'gretap0\x00', 'ipddp0\x00', 'tunl0\x00', 'eql\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa8, 0x208, 0x238, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x1, 0x9100, 'veth1_to_bond\x00', 'bcsf0\x00', 'vcan0\x00', 'sit0\x00', @dev={[], 0xe}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x198, 0x198, 0x1d0, [@comment={'comment\x00', 0x100}]}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}}, {{{0x5, 0x32, 0xf8, 'veth0_to_team\x00', 'veth0\x00', 'dummy0\x00', 'bond_slave_0\x00', @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xe0, 0x150, 0x188, [@rateest={'rateest\x00', 0x48, {{'veth1_to_bond\x00', 'veth0_to_bridge\x00', 0x38, 0x2, 0xfffffffffffffffd, 0x80, 0xaed, 0x400, 0x363, 0x2}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@dev={[], 0xa}, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{{{0x5, 0x0, 0xe8f5, 'sit0\x00', 'veth0_to_bond\x00', 'team_slave_1\x00', 'ifb0\x00', @random="df12733e1c12", [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @random="7dfb8f86bea0", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xd8, 0x110}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}}, {{{0x19, 0x41, 0x6006, 'rose0\x00', 'team_slave_1\x00', '\x00', 'veth1_to_bond\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xe0, 0x118}, [@snat={'snat\x00', 0x10}, @snat={'snat\x00', 0x10, {{@link_local, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@dev={[], 0x18}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff}]}, 0x8f0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000b00)=0xfffffffffffffffd) set_tid_address(&(0x7f0000000100)) getpriority(0x2, r2) mknodat(r0, &(0x7f0000000080)='./file0/\x00', 0x8000, 0x7f) unlink(&(0x7f0000000040)='./file0/\x00') [ 537.365144] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:41 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000000)='./file0/\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') read(r0, &(0x7f00000000c0)=""/35, 0x23) inotify_add_watch(r0, &(0x7f0000000080)='./file0/\x00', 0x408) 15:10:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000", 0x56, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:42 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:42 executing program 5: link(&(0x7f0000000080)='./file0/\x00', &(0x7f00000000c0)='./file0/\x00') unlink(&(0x7f0000000040)='./file0/\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000, 0x0) [ 538.028929] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000", 0x56, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:42 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) setreuid(r0, r1) unlink(&(0x7f0000000040)='./file0/\x00') 15:10:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x200000001000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) 15:10:42 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:42 executing program 5: unlink(&(0x7f0000000000)='./file0/\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x80, 0x7, 0x0, 0x3, 0x81}, 0x0) [ 538.657789] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:43 executing program 3: r0 = memfd_create(&(0x7f0000000000)='GPL}\x00', 0x3) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/\x00', 0x20000, 0x100) renameat2(r0, &(0x7f0000000080)='./file0/\x00', r1, &(0x7f0000000100)='./file0/\x00', 0x1) mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') 15:10:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000", 0x5c, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:43 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/152, 0x98}, {&(0x7f00000012c0)=""/1, 0x1}, {&(0x7f0000001300)=""/12, 0xc}, {&(0x7f0000001340)=""/221, 0xdd}], 0x7, &(0x7f00000014c0)=""/157, 0x9d, 0x1}, 0x8001}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f0000002940)=[{&(0x7f0000001600)=""/251, 0xfb}, {&(0x7f0000001700)}, {&(0x7f0000001740)=""/219, 0xdb}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001900)=""/21, 0x15}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x6, &(0x7f00000029c0)=""/196, 0xc4, 0xc9}, 0x80000001}, {{&(0x7f0000002ac0)=@alg, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002b40)=""/15, 0xf}], 0x1, &(0x7f0000002bc0)=""/64, 0x40, 0x8}, 0x101}], 0x3, 0x2001, &(0x7f0000002cc0)={0x0, 0x989680}) unlink(&(0x7f0000000040)='./file0/\x00') r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) lsetxattr$security_ima(&(0x7f0000001700)='./file0/\x00', &(0x7f0000002d00)='security.ima\x00', &(0x7f0000002d40)=@v2={0x7, 0x0, 0x7, 0x5, 0x61, "03e8c05b144c2ca82480e72fd49661c9a93dc8cf286806e3489abb2f8ad256ff38a4f7a62ecf26a23ead296ee91316bd10e11f1bdada65734fec4d7107f265d731917bfd6f55355ddf95adb11af0a7a1fa1d838dac9a96edd3db61df93e3d62d18"}, 0x6b, 0x1) 15:10:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000080)="0000000080", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[]) r0 = gettid() getpriority(0x3, r0) 15:10:43 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000040)='./file0/\x00', 0x21) 15:10:43 executing program 5: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x800) sendmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000180)=@ethernet={0x6, @dev={[], 0x1c}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000200)="6e27f0a029d473a93446e9f17ce6c48f4f727112eb2b73e21312a6b6bf92335adecf45a90c0aa6e4a6727ed115b110473af10509", 0x34}, {&(0x7f0000000240)="7ac243ca4f0e4fae19924741be556336d1c1ac5dcf5cde37c42d95e724eb4610a0f1f8e65e7e116b06f764dc502a8eee3ea6ba13bb161e08a00823966c9c", 0x3e}, {&(0x7f0000000280)="71de7c26cd82c12bcd30b8cddb9a7c4d1255073d0ead215c4ec85468d506d0cd3da55a99eb39880d44446f8682ebbabe466ac46892707f65d824088c2badc7f9d6659f6eed53baa7b194a2c775cc891b08256226cd98ad02ba7161960fc5d60e844711d994cd699faa49cbb2aadc278dafa0892de77cfc1e350c2eb6e58c8bd4c7235754c5f23a71d6b19446b88837bd1856c66b18dd46f58d17ccc2b75a5875a3db93675da804b49a4a591182d29f4fd3c8b70510d5346aa4e4222b6e8be19a7d68440ca95f518cd02d8768ae55198d22ee53e10cb68f056928b6ebec68eb9b89344e7bd2e2fec854dc476e56fb54dba7a84e4bc2ab237abfd65b0af8f341655980f2aee99cb2ed489604f252a6931f014811d04a6142e83ca28a79feb6db48c79d18aaaa844ae5007139484a853e31d02566b6ae38663032c52b9e5b184d836784329391fa7662ae73e03716fe03c6327a5c459dbc7a5de65fbd11b189e2462bea457d01a7fd2051a6bed29d012bae3f16c20f48ea02c77e3ff77ccc9a83c988cd2417d98113e9f1116e0d49c963b8ed9d3fecc844aec8f32f50292436ed59160a4c6ff993786d7e0ef982fbc1d6e6837433b2429572184b16d6381e0de2b8dbdbd33e4bf7167f24766329d02229af4fc7ce614beb9d259714d71c931fcd9279284a93b9f4ebfd2c5ac8dfbf601120e17225ca6297714e3bc6ee3299cade67ee4d5e0edef506024a048068149ed7e7d7d851075ff9e3eddf4d9f722d91215562cb971f1ff87ad4307d60e0dc34889df5256d7588e249777ae896248f5a252f2ab784e4c71a3e5d950e15552c4956f43d7b3f49b2999b7f8644df7c19ba4875a4aea12ac85ee7488d9e2c99ab2dd6f59b3227542b22044ce9a60e94d96ece68539ab0ae48d1f7460beec679688659ca334c35b68758e7ec0df99e9abb11c23a1e8d0c2d3f82ec5f5c96f7c6f6ad52f67f78311a07a69532dfe0a40848d1cf5b2e944ec87fab341d6116c88015469b92596408baba47154c8c532d49b65cf6f1d3a61b9454865c74d72b5a8fa4cadce6e940936270ffe97915f81d803a18d5b5fb75da8373664c0c9995d87104391ab12fa5536ee31360aae76d30eef3f639544f1ce5fb67b185b31a66b64ec8461e4344b5aca4d6affde4fce6684d48c7cf11d243a13f5787ab9e53c257ed20e336cdd778034790ea95fe34f1180d486dafb0742f2a28e56587e4168a373223add949beb67fec8b0a4724ea17172a4f87769e92b4dcd2d9750704bd22ee591a17a09f8eba505ee6af01290c378c2292b509c14e66e0c7b0fdbb955fee31b599bfd7f5b47ad3a9eabadfd2be1aa7a84fd8f47de0c5f632c105c7e6d99eb3420a737f0f71f0a497b28273b35c5892951a990f235f7d7be23cce30075efa6177131914e38f1293e3d8024f4fa428557fc69224f3f035af8df6e96d68870f7b184110fe58292f281c18e67e97226fcef67ee7f2f58d03e39f66f99385214a9700101da6881b1e7e31e604d61cc8f2834a6d95d8976b8e486698c1ac2a3ec5c628ad5ae8b084f70e03d7c9d5e66442f4f0b8fe4b241a3686e13d96eddf03b5592dac1f558788c6378922c9526632b5fc64c344023c1556d69ee406df77a14bf8f35ed8256bc3ff2965b422ed82ed54477eb34047ca57129e1878250d9638218cb96be9a9473c8db093604c7d41da3e6a4a6fe1347ca456a49b07d2026c70ebb353d525cd8faf07192154c552b08de8338db0d9dbd3aa219fed68aac97fa123d2fb1b736343709533023a23ba3e00fc951c88d65333709b40d265c561abe69bee4b2d1888a36c214fb7348b1c4c492b18c3ea116c2ded77f8a7c84d03e0adebefe33d19794b5995be9ee67b461fd84e944d5c070e792f36b2d2b74279ae48238228154a7bc1d8fff1b966823ac2225b450040820fe3265f7b816923d56e7b3cb3f92ad2b07bca6ea56af59d41d44c33a34d23e574a5a36ec19e3aa87c6dcce804c4aae18847f1c2fbac4de2eadb5e099841bb2ee9f7af643f81ec5fc0414544416861ea0d1f435a5a2f020d234287502fd5261b991e7766b695f8e73193cc12708ef7492bf332234230a64ff6ed84881603db4bc460448cdaf2975cca10d37c414da55079698dfa80869c69d3d5b62e4564b02535b2aa505ce400f6b9192d32b12edb5fcb08ad43452a8c449820c68e433d2421966968625411bdfc72f6ebfc6d23366a20dd1d910eab2a3c005f394080097c4c3cd8c8d578fa6c1783a41a39c5a76771eb9e8cc21a8bd406921dd79da248ba393d6cf7878ce7a3d3eac2d29e7387113fdb39134e7b9467e8bbf8de493332e11cc73d7ead0d0b638823631fe333b46bc96e90c3219fa7a311c4445f5032725a8379f4d63a28936efa0c28a02432469ba3de6defbd67174ac14525833a35fa67ad0e2856c93c97c6f0ed26f7e17edbf57ca222e4aef0d95e4b4d6349c97634d2fa85414908c2273685c697387c7c75db00b6875f6ef18e1585deb7641bfaf58eed1bd07c2c12f8aba9000cf643e7b14e5a6c723f5ae4bd317e389458987c211010db705f52df4dfc8fb1090c79e11863f2b146708284a8d70facffde1e8a1efc123dcaffbd7e7655f3bca2820b3b9b7de090ac6efcd8b31e275683a0af564e7ebba45c39cc957f5135b279b8c5e9d06143ddaa8e473fc173c02033edea615d987d6cc8b10bf644e16bc968e3cd2c704b5a6821d33d4cf487aaa8fbb2b33190bc7a439ec776f356ea1dc00d67e17847bdd64551f3c8f48e15a9bc2f84e62472c9ab8705cd6a3fd13a2030c161373360cc1728d897fc33313507c43a5a9a2ea2c169214590a54d2b81dbb81a4b4e8d21165a42770344b50f09206125a1d1bd38a3c5f865ec9fefdeedd5c624fca6835cdf9c0d5e2bd65c1506cfeb885c26180ecce878e3d8f6f0dca4621204a6c926746a3b030d94a282869cf27c3591227dbd642752f5d34a741c04a11f807b206c2f6f757bcbc57f431be029c872d0c770ecc1b2923afdcbe0d9a9d84083b552dd31ad49c352a07ff622c4e9567807fc030df1f7ac460ce258fcbde6b60b305b0d98c7b95a8a5abfb62080e2ca02a863d7a9bd883330f74b37b90b0a4ec235775b9802a718cf60e101c85d7d3a97aa0a2a3381fb423dd980b09862006b8ecdf76d35b1a4e49a5448fea7baf5180e0a9569147c9455a786a40797ba586be31e8e4f996b30fae567304df13d451f186a7ec0e8a58f4e18b12bd8230915490249d31759dc8233e72354b639a033fb4a5e32a0ea09eec46328676e2205f4f6e369da020e8a6e0a5d92c9cf4e28f2c55bce1dfdf86fef7c4c1656c9b90b6389b4b20d9758be1aafb264c5d989a1e359839c7615fa1c8a46f8f8d878efc5e135bfb6b779be462e25d294e1881258e26c991b3274ed4189ba23a580ccf3b175f262f2e9156700a23e1dc8918b2f0b6ae5952aba7a0aaa05845a47d8360b133c844d0de3ff55894e34a12dcffe55e0628eef728bc5da53a704529bf66153fe10f6f35c94da8c765ea5d18418412358823359792e5506b21e6d96a54a8de012835efbdc3705b56fe4b528e4d2998f4162541d974f1e0b14afcec15b5b87380efd5287fae3c67dbeebe142e0a6b9edccc644cee86e46e105638700516325f159d0f45c8191926d0232c65c5f5c99a32aca2e507d987cc478acb49b03e0f4502ae10d10a95b3e1353b1668091cb65d2da6c892b8670453b1eb6809c5153a3c75f6707562a1fd2f4962ae871ce54ed7fbeb16992e5cfc545a6bf12fdc885be2d746ae7136242a7df2945974ec5280669e52dab83856fa6798f529811683cae8fd12aea61b596eae98026d14ad98bf31734dcaf54157ecfc1081b88326d0da9a82e21e644424fbd732417f9a4d19218253c5488feef60a1cb8423a4b2b3dd15fe090f8e64b487c61dbf0da8c7555c6a0dc2dd86065fb3e1c33da215ac741c8ca49990248995f3e820b32c7e2fa35d23e4b54894fd91251647780028bac2903e1cee375511c555a4f885eafedb494f0ae0e672dffff2eba60f0157d94d0067f353fc95ad4ddecd32e8f472921ccc50d1319649f9778f6a44e4a3a1c918ab69ef6fe8236ed2fe9ec921bd519da4f0088d43fa5ab26588ca0adce25b8e10d93c76f373b494d36ce8dd50b4b11da4c798d3e62039c5b530603a16cfa691ada48ee111cc6fe25d911dc864943f05fcd641c64f732bae86d7ca900773c61ec922527ab9f86a9c660c8e3c16ef2dee1d14f61f018a9aba0276b63dfffcde3b9e249e85c99b2fb77ae704c7a26ec2406d433e0d2068efa4b91f2f9171224468f0a08c677e4a472b93ea5f086a117244427c73726d07277f96155acd3cc8b77e1a2504b122f4ac3bf1916bb18da61dd1add304b4979e2191ce401b5b5716f380a426d6301d63456ebb36f7a015f4b680be1f99f635b550b2459cfcd84697c334ee785388df2fe9d1f35a55e702cf84e4aabf6557bc352df15741457fce854551ee0716f9e714efb734f71a370d0ea9b7ed6c72e0a1bda204116ce9ac56fd694d2084bce9fec82d4a6f116f738dc8352623790a61bb7e559a68cdd758e61a14db5750790826b77b81d8a6aabf27315c37ed1d10d1396a62fc8235d2d3e3d6012bb6a2d323946b72ad1d441e956744932c00c62a076bf646b33ce98d7e56f407d3a9aaf2cede4b53515a4f09181197f38e427b94a49c5bfa9c4012ba2010869aa4b150261ba08eed6cc1e6d2cef154c15b50ac3d2aed767daa2b52333735b04bcf858ae802bea72d86465507391b65bfbbd60091e4f2fae94bce6e17bbdeb80963f4daac3e90c5dada4738851d8b7316f2d74c9b373e27c3e76219719c6003f83ea73afe8145f48b3eb7ace53d05b883209a3e11f6e059f4eea91f9e293865e8f6b85560c6dd366befe3df9ed2a0c88f85197156ee8048c1a5d9d95553162f924ed28c69794adfed28990697f91537b8b8cb5fddbd038169e109a3b186a283bf6c112a940345eefe35696a13228895f3a6f24f76ba43cd3127dd7d7e34640ed641d18fa83cd4dbd8a44459b1f21295f904aaea7041420afada2825e0118cd7b6bdb094f64d9c06f760a8cf4ed0103d74b8b9a77027a63a49efe27824d1cad08f6080ee3206c51c2ef7913019d5a6f7f1b813c497096bad4be6a575e6785b5fcdaf5c62680f2f39257d352d7782cd50fc4ce0684c1946b84570efa206c1e643f13017dbfdbe2ceb63b578cecafe437ed5a511abee95206785597fd3083d53f8382747706e2f5a25c7af25a1c0b41eefe5a716524c967b2ee9b08ce0b7e56a63fc7dfd6cfa351d6919b5ff2ec158239b143c0d37e425af77d0446ade86667e5a89a7c0e159c5d2f2389dd824dabf954c3aadd9830a35c1e8f310a25216691ff1e2142bae3874827018a0384df10cfd9a35f9bbdbf163bb2a7541711cb2980d2771505424f397f8bd8bd380d2e40842e80fa3dbc1662fb7ff0379967aa232a711682b5b8ccb049318e86733000e8c155efc9027abf69efc0cd06be11fae70caadcb9a6205927654befea636af8df8104fed0f2bf006046b29d5668fef4e870967f5ae9d0683eca733240757c271f815a79e42dd5505eb35aa958f07ac05ffaf8e4e5a30faadac3c4eedcbaf860c24a213b30f28d855612a4371951e3d5d9e6c2753da81c291dd5c550831e911fe43588056d4c999a4385de1507cce71cb225b1cd9bb760bb929193ab688f1501c8b1f027b23e5d1d7391ec6e1e2bd774e13247d43f303", 0x1000}], 0x3, &(0x7f00000012c0)=[{0x48, 0x100, 0x5, "ae77fc85819cb8bd4316f27a8ea1083c8fe9078524543b42a8530f470915c7cfc5e03cb032e2f618629e95763259878b0255"}, {0xc0, 0x109, 0x2, "9d2bc79bb85b7bd1460fd2c440c6e4b235739aeba0ce20cfe7cb79d5b014c59311c006c4b17685d347d5804f9827cb16c019cfc60d9ea3213ea30b628a7e35dec05ec57e1fae560d2e2a27f123077f7c933cc8a5081f31105bcb0863a127bf2182abf7a047621ec803185a8834934096ff68836fc20f7190e8849b50c1a7c395bf2aef69743443cedcd795a1c6f8d3efd2e4864ab16dafc657d123c096c94a986f0ea031c2eb6665a1d9"}, {0xd8, 0x0, 0xba6, "945401325fe67506847d2b6c030a2459454fd0c51655dd64b6a6268f1a2f2c75697fb6ba22d6f916203be6c4a350cbf73e6a4904b213edbeeecd6f9322596ca01e09f7b4e951ff77b951f1eed3c5b02ea4d8a5869411c6d7befa13bd1caaafe309b346c980ea647913d5bf330dcfe45ba91132a2f5ef162231772b1ee87714069a786a40920c2219fab01e0301df69e85f0a51f6a20edc21f9d81167702da97b3b2212c143105857088d08a99ac5352fca27af58d8d8ce83466e924c59c33ba968b1"}, {0x88, 0x117, 0x221, "9553ad70b65196111dc992e418123ac6bb840abaa91eba44e8e88b258c8fc3b5b18c7bb9509e754f981f9def8bf2e51412de277f6a43bc681e2f833667529be9b62b75d07c9344e11c989457e5a61cd62d2d1b1f86c675b4ea7e107003f50f0eb8139b7252c887ec5d42e17d0b4202f893633e689cde0e0a"}, {0xc8, 0x11b, 0x200000, "b369eec012b36ce7b517e3b1466c94a73465a66c030c96dcde07b4ddfbc2f7d66a7ffd4d754b49ff5e2c463ffbe4c8b4c5397c6f83a231a1984b5437a90557ff375824b66eacd87bc0cb9703d8022988254c8231e48583d63d093e00a3943a9355feb2f2282e89ed9417582f98100b39c17daf86bfa76f81fa8103e85dd6c510220e3e1ca1b638efec305770e247b2936f1f68f1e3752ec2289a4e80b08d9444bd9f1e80b9f01de00fc0f7fb8fc0e451aabae92c6d675c12"}, {0x38, 0x1bf, 0xfff, "75f9adc3cfe2175ab6489970c9c1deb2bb66dfdbd4323c9c60f7fbfe73a36871a8a4d12502d29ef8"}, {0x88, 0x109, 0xfffffffffffffff8, "28a3fdefd1b73b1a7468219070fe033ab3d76790d19e5c3e73cb75980910b41c608fda06acfd1aee79814b8eee15d4c90200883807ed2c9cda62555168d2cf303059d4a2a95bea3d420b6fb685a30ffdab4b8072af39badf542083b20d92d9934bb1cfeafcea13c8710e7279953c673155e818"}, {0x38, 0x6, 0x2, "11d439e8ef19ccc9887caaa006ea3d3fad702c5f35bfb09259e8c441bfe110f12dce913229"}, {0xd8, 0x0, 0xffffffff, "c30fe54e775991bfa1277d52445553fb8eb95cf94104c796c7557968cb89131d32465177d61bc232890e5246cd9ef01b1bc5ef317db87d7800d29f9e3025955650a1686df35b9524d0b2ecf91698edff964e85bb82f9a46c165a61f6cbfd134e11fcfc5d9e9e747a83169957b308bf06378dd43067cff6ee57475346bd833c798e181e6c30fc022cce33ea77305afe57d0f10d682c4069241715f8852b7000d2a3dac81247aa24075f98634f53ae212869ee92d00f5eb76727c71d6b25c1b52ae672"}, {0x48, 0x11f, 0x3, "17a2d8644a3e5cdfc4ea4a51a96b924b6e62d4d0e1490c413c770695e2cee1972b52247fc819c10a98167a51c316afb8ca"}], 0x548, 0x20000000}, 0xffff}], 0x1, 0x80) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0/\x00', r1, &(0x7f00000000c0)='./file0/\x00') unlink(&(0x7f0000000080)='./file0/\x00') [ 539.299807] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) [ 539.336700] kauditd_printk_skb: 424 callbacks suppressed [ 539.336709] audit: type=1400 audit(1538147443.614:27761): avc: denied { map } for pid=24505 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:43 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 539.357214] audit: type=1400 audit(1538147443.634:27762): avc: denied { map } for pid=24505 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:44 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f00000001c0)=ANY=[@ANYBLOB="63f09a7bf96f6d6d177853df6b91759c22833705bf4597fb56ea655383f8ec875f152c1a993c5e1836378c7fb1dac9e245eb4e73c5e4d99586566236bc9188f3d7c8d3b01fa14266f6de0bcdfd73a315c1ef917c172d9138a355a362004f91e1894b68a604fbba31c8f0e91181d924d7b0c698441a31828de451b25b86d5c7664142ab1ed1aab9c848a481"]) r0 = getuid() mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='bpf\x00', 0x1042000, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x872e}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x2000}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x852}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, 'eth0'}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000100)=""/33, &(0x7f0000000180)=0x21) timerfd_create(0x7, 0x80000) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) [ 539.380795] audit: type=1400 audit(1538147443.664:27763): avc: denied { map } for pid=24505 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 539.389397] audit: type=1400 audit(1538147443.664:27764): avc: denied { map } for pid=24505 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:44 executing program 5: unlink(&(0x7f0000000040)='./file0/\x00') prctl$setfpexc(0xc, 0x80000) 15:10:44 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') setgroups(0x0, &(0x7f0000000500)=[0x0, 0x0]) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)={0xffffffffffffffff}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0/\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x2000004, &(0x7f0000000100)='ppp0.\x00') setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x89, @empty, 0x4e20, 0x3, 'wlc\x00', 0x20, 0x1f, 0x45}, 0x2c) [ 539.442722] audit: type=1400 audit(1538147443.724:27765): avc: denied { map } for pid=24505 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 539.447360] audit: type=1400 audit(1538147443.724:27766): avc: denied { map } for pid=24505 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 539.550433] audit: type=1400 audit(1538147443.804:27767): avc: denied { map } for pid=24521 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 539.553445] audit: type=1400 audit(1538147443.834:27768): avc: denied { map } for pid=24521 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 539.574107] audit: type=1400 audit(1538147443.854:27769): avc: denied { map } for pid=24521 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 539.581338] audit: type=1400 audit(1538147443.864:27770): avc: denied { map } for pid=24521 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000", 0x5c, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x8, 0x4) 15:10:45 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:45 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x201000, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) 15:10:45 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40481, 0x0) mknodat(r0, &(0x7f0000000080)='./file0/\x00', 0x121, 0x6) 15:10:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x10000000000000) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f000000aac0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x33a67ab7}, 0x80000001}, {{&(0x7f0000000280)=@nfc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000500)=""/57, 0x39}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/11, 0xb}, {&(0x7f0000000700)=""/155, 0x9b}], 0x8, &(0x7f0000000840)=""/75, 0x4b, 0x4}, 0xfffffffffffff801}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/216, 0xd8}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000000ac0)=""/94, 0x5e, 0x8d}, 0xd852}, {{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000003040)=[{&(0x7f0000001c40)=""/93, 0x5d}, {&(0x7f0000001cc0)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/203, 0xcb}, {&(0x7f0000002ec0)=""/136, 0x88}, {&(0x7f0000002f80)=""/156, 0x9c}, {&(0x7f0000000b40)=""/31, 0x1f}], 0x7, &(0x7f00000030c0)=""/20, 0x14, 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000003100)=""/113, 0x71}, {&(0x7f0000003180)=""/190, 0xbe}, {&(0x7f0000003240)=""/88, 0x58}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/157, 0x9d}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/237, 0xed}], 0x8, &(0x7f0000005600)=""/142, 0x8e, 0xec}, 0xa1}, {{&(0x7f00000056c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000005740)=""/167, 0xa7}, {&(0x7f0000005800)=""/106, 0x6a}, {&(0x7f0000005880)=""/12, 0xc}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/221, 0xdd}], 0x5, &(0x7f0000006a40)=""/4096, 0x1000, 0x7ff}, 0x800}, {{&(0x7f0000007a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000007ac0)=""/72, 0x48}, {&(0x7f0000007b40)=""/4096, 0x1000}, {&(0x7f0000008b40)=""/219, 0xdb}, {&(0x7f0000008c40)=""/111, 0x6f}, {&(0x7f0000008cc0)=""/5, 0x5}, {&(0x7f0000008d00)=""/246, 0xf6}, {&(0x7f0000008e00)=""/204, 0xcc}, {&(0x7f0000008f00)=""/138, 0x8a}], 0x8, &(0x7f0000009040)=""/57, 0x39, 0x800}, 0x2}, {{&(0x7f0000009080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f000000a380)=[{&(0x7f0000009100)=""/254, 0xfe}, {&(0x7f0000009200)=""/4096, 0x1000}, {&(0x7f000000a200)=""/26, 0x1a}, {&(0x7f000000a240)=""/15, 0xf}, {&(0x7f000000a280)=""/47, 0x2f}, {&(0x7f000000a2c0)=""/54, 0x36}, {&(0x7f000000a300)=""/80, 0x50}], 0x7, &(0x7f000000a400)=""/92, 0x5c, 0x7}, 0x6}, {{0x0, 0x0, &(0x7f000000aa40)=[{&(0x7f000000a480)=""/137, 0x89}, {&(0x7f000000a540)=""/84, 0x54}, {&(0x7f000000a5c0)=""/137, 0x89}, {&(0x7f000000a680)=""/142, 0x8e}, {&(0x7f000000a740)=""/255, 0xff}, {&(0x7f000000a840)=""/236, 0xec}, {&(0x7f000000a940)=""/235, 0xeb}], 0x7, 0x0, 0x0, 0xc3c}, 0x800}], 0x9, 0x40002000, &(0x7f000000ad00)={0x77359400}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x8000, 0x8) [ 541.041807] f2fs_msg: 46 callbacks suppressed [ 541.041813] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:10:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956f8264b724a600cb000000000070f6683540150024001d001fc41180060000003ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 541.106116] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 541.162083] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 541.199525] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 541.238923] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 541.278957] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:45 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/\x00', &(0x7f0000000080)='bpf\x00', 0x800000, &(0x7f00000000c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x62, 0x7d, 0x0, 0x35, 0x0, 0x0, 0x64], 0x2d, [0x0, 0x33, 0x0, 0x61], 0x2d, [0x77, 0x32, 0x37, 0x7d], 0x2d, [0x39, 0x35, 0x7f, 0x65], 0x2d, [0x64, 0x0, 0x65, 0x35, 0x62, 0x77, 0x39, 0x7f]}}}]}) unlink(&(0x7f0000000040)='./file0/\x00') [ 541.326104] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(0) 15:10:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 541.376705] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 15:10:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000", 0x5c, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 541.399731] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:45 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRES64, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYPTR, @ANYRES32, @ANYRESHEX], @ANYBLOB="9c749450d553d3b4d9fb209ca6ee82029bca13d27409cac374b70e6716d0a845292e5b779551d6988732d1e99635ca58cfcf425c31e105be3c42da7d0b620ee5a970c74c723de32733dc5a70124f05ddde66b9fdd6f84e4fbe08877fa92eb1e501e939dc3d8da6e1514c538e466e2437f4e92dbb34eac5cf77bc8183e217b9ab7f4323fa424437e7a6c8f70572e18a4d12f55c5b9148df8c8e642b9a261ab3670b767614d87b969c045bceedf7c4e8616f7ae7ba5940e8b57517931bac4e2df4798b327a6e1d5b3279a3752bef77a46331b9dd4109ce09fb77db11fc96b2e798e8c2170c105e5bcb369638a99427cb1f5fcb5b27cd1820fc", @ANYRES32], @ANYRESDEC, @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16, @ANYPTR, @ANYPTR, @ANYRES32=0x0, @ANYBLOB="b2b6dae40c7e55b9989cdde585b9011e49fa763a6e596a65dba2c74684e14b3195c1114128deed9bbfbe0b1c45c0157f514e18fb415b52faf5b00ffda2d68e08ba", @ANYRESOCT, @ANYPTR, @ANYRESHEX, @ANYPTR64], @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRES32], @ANYRESDEC, @ANYRES32, @ANYRESHEX], @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX]]]) lsetxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xf9fa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000640)="611b6e44aa8ebe1e69cb3ba4aebc62034073b56c9a7840161ae5f732ae91112df0a5e8ea26f3df6b99c7b823d331a3f2cc64f18cc1205efaa0d21ea6af87526cf5015960c82ff5a0e8f714b2bd4f7038d7c1f282c04ee4c0f3994ec2a7238a6617f467137bbe639646151ad506ca80387dfb9f0d051a", 0x76, 0x10000}], 0x41, &(0x7f00000007c0)={[{@debug='debug'}, {@abort='abort'}, {@nolazytime='nolazytime'}], [{@appraise='appraise'}, {@uid_eq={'uid', 0x3d, r0}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0xaf}}, {@hash='hash'}]}) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) 15:10:46 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f00000001c0)='./file0/\x00') 15:10:46 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0xffffffffffffffff, 0x0) [ 542.154095] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:10:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300", 0x5f, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 542.175060] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) [ 542.270019] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) 15:10:46 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={"0000bd6800", 0x43732e5398416f1e}) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 15:10:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:46 executing program 3: mkdir(&(0x7f0000000000)='./file0/\x00', 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x404000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0xb6fa, 0x1, 0x5, 0x0, 0x0, [{r0, 0x0, 0x4}, {r0, 0x0, 0xfffffffffffffffa}, {r0, 0x0, 0x2}, {r0, 0x0, 0x3f}, {r0, 0x0, 0x1000}]}) getpeername(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) unlink(&(0x7f00000000c0)='./file0/\x00') [ 542.743551] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.800156] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300", 0x5f, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80), &(0x7f0000006980)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x1, r1, 0x3b}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000bc0)="f482cbffe5e6f692eb63b72e634b85277e1dd9d0f19b6e322c277d211d29bd63f4f6129d3d4341bd36c59a8c45ca4f4acfa8831810971430b514b30934c8bdb1d0ee68b9795b7b6a95c227f9a76ad053878347626f5f46fed22c27a5206c19e15cd79285033b574814ddb0ce402fe2a436f393e2f01975b7368e7aaf74b92e480561b4f73f28b04f17501bd269bffc9799b2fec08d05ef9342edfa6d65be9f55fc7594a52c50536c389e80a27e4fe7edc289a32367e28bcf18df5e658675ecc8c9c1173170d599b822590402d7c4f8cb5f6b7dc26141b1f254a18ce75209d6ff7ee6c097f816ec1680026340f51cc41ef2841649b0972624e226a7e7215457ab1615ed6479e5d7438297d7a73b83672c8f91e21dfa9e4fb3a80f8179869100a2b8bf73ecb67c7768c0204251fa852ce412ea30c7ffa1c7b14948f79e19c451d18cfe01d9f10c5a9020b1e8dcade8e8a29f8d2a4d09c6cb058b9a5335f6907e30a1a3baf06c4962ab77ea24aa6db670947bda8bcf62976ed187856a400d85b359055162d88c7ed7942001c91f5d301b328978162092b869c769fc484d80fbd029883f9be8e781e55b2c09a61e4097629122616620664dae4d0c0bbd275105a254e2c3e203ec96d72cb70ff41122d6e6259f8ab49af1bfba5aacbca7c6a9fb4f5fe354d3903e20a4473969bc61ee1c890e7d7985ce9d13ab6169002cda2a0a3927dbf0312f230e5d5401443beea4e06520b86248dad3f055796da0621e4a4d4a36cc6d6d6acccea8f6c954f331e42134449c0a33a88d9b68b7babeec80287db9f2ef3f5507d8a4319f413527f0a3cae5b5aff2d510222cd4c7391ee88a3b5c84dc246b8d0f34ff58b66843c9b7817cb8fc4d7b73ab8cda7c8fd3f40b42d32b19658a8e78c913a454a4972211b00a5ccf82028969736fa1af8ca9d40afee71ae2ec20f132907c0d23ff8a91f6efb8514e58accfa10a482d7fb88753aec78b5a78be69b4e66a5cbe95c22abdd9fd5634a9d84876a6d21c614e0ebb31be68ca511eeb865482f3c3a10ed1abc78e1186a593e812e11460962eb3e73534d621208d728684121eb21ef07fe400e9a3ab2912f7fcb07e149811afdd763460aac16391a92ee2cf93b9b06da877d271a23ae34318a9a14930cfab7dc1fc98553c453aba21b32a5da22cbe79b2e9ba1efee29ded9cab760689059fffc913c5e81c4844fb76fbca9c574ef5f96f575e11c5240da289146e078887ad84b300c5eabc5049821f71bcc168292803433cb0164606c8000f2b4fbb55786ada559dec8fc02a755b2e5c8003625b7fca32cf3e91b0b8e6cfbd82794b3f3b564712ae99dec6ed803682f0fb67c00e54aad9f6a3acfe1c7dfbeef499f5844801ca8f1d4895fde6820a8eaf2aaa4e3351f4f66f0f85501c99e683a8649c7514ac2c6978cef3150e0d57cf1b27aecafbe17b89e0f0dc5317b8821f94e8eb3285ffcc3e8cefbd11f5b0cb66d9c09381002fe9dc95852971cd974ab749b9966985796ac855337a384b3532a2fcfd74d96fef50c5fa6554b72a61c4c99f2db02b3f3f69db1beae6f829ecd714779ca735ad14fc54cb5801d7c129aa1b2e5e12772a3f4b73ddf7c02f0f7157d85581db715556567a7c55b81ba0717dc6bb7bef6af5c491bbfefb9d976f8381f2ff6ba4c22e1d9c7996d2147f64f55a11de4e5513848754916bee271beb156bace2ed065a733baffe7bf1639548693833d06b6e134ce9d03aaceaaeeed2479660798212be97ec556e263f59460843528c9038941ebed400819f431a8337377bd2a49a962cf221cf2bf309c4e3cd605baf7bebc9b81228603411339fa3de7131418848cf558e44948f6949c8ba68295aa4ae4f67659e627df797c644923c1eb6363d9e3b8a2c26873c731dc18cbef1c81bb5dd12d4709da337fb2f3c75d7b7d34b4db14c624a2fbe4edb058d92223be3d4c5f5b03f475cf272892c02c23b52d3d9fdfdf2cb2898e8c3454e99fa12528a017a9fb2aa1dd3175312d292fd565a9330f1191d1b286f777b751cfa7f355c202d6806f4aa622de6b03f7fef5cc45f6b56db7aa5a4097ef7abf07db44b298e9f801ae9768e08f7eeb0c365adb3deca88a9ef91d4973b4f2c0ceac331b4b6d256c2b034d88a287142f35bb50084bb6472ae0d949bef9e8807d0c030f4d36a07f4fd4cefd9d2833a347dc5d1d0b26303e34caae2abd80cbd0156d7bd32bc20da6026da7dcd185758d3b2d7fe47af3d72b80acf599e9ab79258ed071d17612b23a25f9ada134f36598f000a6632d09915c0e44363a80db6eb278328d782542e5ad7673338e3d161166e4a3d99168242eea1bd945877b16e303987f8b29ecf5985091c929467774493603df7c086e53045f586feee79219a6d9812b96689bc5f1b23325da1455d5a924a92655c14236b0d7197ca103ca1be5e81b2084057b0866e7b99b5eef2d0e355f1d4a2b0acc3bd8067f502f65bcbe55e726b067c814d255c914425dffbc95ccd0b2a08875aa13838c5562d54f706a7c5ead9c66f356479167550fd62a72077f21a72bee74cdfe9d5b3d6eb534a4d0d3338b06f2866181c9b37b3b818f6f7c1ddf7ae4186ab0403b73bdaa9ec3b6404adc7faf2304450f28ffe484363775c6fb713f73022a04e98a7f647f9300706710685830acf49ff31f5c53ccf0d1cba36162039b6c87a60c65f9b5fb0038d7215f6a5d79405547eac9d93500dfbbd1613ec27d14d3d44daee10bc47bacd1e949ecccfd35ab94c45d7f960aa6411c2e9bf3da49441f5dc6174336770e3a9038f8d19e02698f2ee375f4fe1368d7b4f83feb0d10ade0a02920259477997a7ba1b69cb1837233cabbf164781e194b4a0799efdb1843d9879d8a8b88d825e42fa2438d348814702078ffd58652d5c22fe59348e752a59b5ccf9c4e56c51caa307b19e6f9d0aef7233756d8855cec061e25344fbe4fc151cdc45e3a54527458cb03147eee9e271723a62d75a7aeb0f817764d647a022b0f2b500b4643e0bdcde5215e57687d32824f60b568da54236d3028b40a6834b54db81ad0314416f1f7ae52978386df7f6e9849b3a268676dd7d1be5cae9a97dd5dcb491f064a762a9ab9674a86cd92fee649f70fe906f5622ce1c55ee2ecdd93a8c89e65b98dda30e0c1e79d5e7c0cd6bc34a0abb4b9b9aa8c77b65a5fb641ebfae743125010c768e052cbeb33738cabd7cda5c180c76d90dff1fffaeca090ff7aa22dc040cce80cf0dd53be6370f6bebc755d9f3cbeaeb23a39f55b78366addd5b26729d6ef02f3e98c3bdb8b5407d6ab06552683f7f2240bd74eb0690433fbb9c36f1f6d47d57c41c2dc7b1b767eb78966a01a274ea6a0641550dff5319f26acc13739a9cb0a74006881e29c0216791e6572f162ab43b6e84ffca07ffe946bb7404dfe10a64909681200fbe7956f273bbf49d483ac8fa881572a6066fe7ae7da2ed875376012f6319e21f9292e49bae1a2ca721efadeac52107062cbc630a518fb33717f4d7698629d48e5b74b1d8a8838cbbdb20d5acb02ac7558ff5207795e624106a56ab4b9d3639915c4bd2f923132d20cfb8511a724c1b40abdb0985080257c86dd45430a62c93bdcb7d9d64c844effad565b7329192f794788bcb5160c728ca0c5a3cce9527332c6f98a9fea0cc9286c27ea57daa8d1bc26e8ac01f886d4368acafb916cafad8ddb71fc7677c675c4d3877b5120c6595ccc4633ba483f26f12ba2ff648ad01668ee147d460f5715c11ccffca0cca3f60bcac9feb7a1d5edf1c14837c7fdf76369e39a50ad9b9efe9726836d925f278d4650ba3756b0f5001d7438e610d863847ba95f0525921b804c4e2cd6110b0da7db86733b4958e631be10b5ffb8ac91837ed7db48f8b2f479a0ac5bc370e3c89b41434debf05b32a308fd01d90f42796533f8dfced166019825f37f0cd88c9b81b037b05c8a8d5d8a51e85761afbc509c1c3ac850af7eaa7725658dc2b76ffc38182eb9957d7f1522b4a92b209c53eb00bcc7c39583715abd2e416a7f5e495108dd828d3b768ad15feb887cef43383d74ccffaa6547d9c62c95b752389c616e9f987a7c02ebf119f43605a06f88520e1a07c03d4cf276cd9cb62dea51a1aec4d561e1247f5b2bc1ce4f980bc2f08a58dfc1871ed1d552b83b1485c93a5bd3d53613d2e7ce5c576efe0df46e68e9d412040861c728eee027951a34b2df9684fdb46460daee2bc25352c9f619275a21739f9a779889a467be692310cc09b6a0fc9e23fec67fa4b0033277b15294dcd905d99738e8ad133c0a7c879ca9817180a9a3d5aaf74ab6bb84ea1d5d5382030a1abd8ae965fa076c3027fc60e3261e01ccd0fed80108f5b869edf8a4a3045b2a0d351dcf69c71ff5b7d0d076b675fb9f006059ac29cb1ed1d39bb3d3bc1f3931bcea2e923faccda7cdb35cd71d9e9667f9e17f8aa032c5c7ff42a3730c95430f3aaa7c5054525f604009919c611398a1717761907ce2530ef94a4d7bd1a73af421f7ac5b7bb46957e4ea2a678253ada96c1506aa2320da5c26eeb5df715aa6fb71630195cf5e4612dd23d1957fcf99a03d6ec04ea581712e0718c0cd24275a669b56a278ee20ed72d8247f89f2b9f3fe177f5a6476403b7a45b02a6b589407ae145671be4f641b33aeaa590b2ee4e404564c3a51703f6e183c27e0b082ca69e515155d24a01cecd24bd1383a33748d10b1f6340e14af52fd9dee38b2609bd2bf854ba8da10f9cbfa321a9a447813e823b55e886bbb6a2252a8c0dde24fb5c875044469397afb211079f99f22e084abc4c37d21deeeca3a2b321f9bb448bd4ae6f4062c37db5fb1704f24a83135b4053f3742c925f5c1d16492f4b2ccccfd7783b22e4f2535f053adbc179ba7fb3ff09c0cff7a2996e24f4ab7d0729756c59bdb1e2914a11f7afa9078cca618181dcc059b19dd8da8ab5f5017133971f5081197ca453efd8b97f83ecabd46ab1ed5c61f3bfd37c6f8494cbf3117cc7b5ce3345cdde90679364b92e3a56a35f3a5a467dcd42829598c9bcb7a31bc9ec77408b906085ebdf18a5f1f95ad565ca380194f57a979862812cbdf302505c741618da5f0a04c7dcc97b9170156c0ff04cc174ccf4da93a7f59c5b9cf3cb9dbece944fcfe0d5c976108ce963cdf205d7763c1466218d9ef508431b6b60a8756f2a4e39ec6825e5687c8f6266a433e808eea66cf17c7f2ee2d30d1182b5e37c95b3590de0264550222fd05c78935736b6932c89c77e41bda68f044d237496ffb47c72461ad762b81b9c6649a1cfe04a78025ed3d85bc8db3c4d3d542f9e32c3fa2bd5b1cf6a0076a21dff81b9f59a8af9a859db9931f2be5abefde96e1890839284249c9e806d858a38b51a131996b7f4edf0a8ca061d493399a1097c9d26b49b74e5cafd93fe5cde8b7c2be98ae03421e970db8f674c8ad5382fb7d26be6e1370cada7feaae4bf26459004eb764a49fb9fb558bbd7ffaa0f41cd3336cc1813c5798c3c55125bf6779e36509686995b4fac1dd49533a37ae07a076d6d254cfd0d041cda66b87660e8f7d6103f28732b18a6731f440ccb66c7b371bf3c4488be0e12abd16445370dcff270ccb4a35e88c417f2dc48350fcb0bd9d1f68604a1355bb2f0b3d90cc4d55556411654c30d882dbdc72f9352aa7fa7084008fcc2c99c8e04d70d4319be8c58f148545822e8b5d7556c28a5439792d5ff3b15cae841c657c880d116bb15e511bac438c430914b0345832d5d6e78101ff85daac59021c02c6146ad59ad", 0x1000}, {&(0x7f0000000200)="2a494a11096788351c51a523af31d7366941712d5bbe7854716b895733ba3c638fb7b3a37e40519324680f9bbd7d612eabd95bf8fcf212ffc9d3fa259a67663e73fbfc6e8c70784d1fc0090a9895f18e415beef3b15086d29038", 0x5a}, {&(0x7f0000000280)="1f8392856b01c8438a16350f991154fe50d9e115b4ca139084e842", 0x1b}, {&(0x7f00000002c0)="2948d4a82f4344e2d5a854790ad08677c53ed8df026c4d0cc07f401c565866c1bc1efe85dc98c235c3790a79ab98c656d566aab9dd9871ad76fd387cb37bf6b497b83813fc376aa6ad2fabd18a3470c889c247a0606602cb093c9f7e6930624c4fea94bac2a65bb3a9221ff75a8351484f5779bb741507e8ac5b2f46c7768c9e05c02694ad8541fe79a6da99c28a341f092288d3b6977f79e844cc61b40acd21102426d3f535ebfa67c7e5b720ad4c04ba4af114fb617926cc3402d2d5b7c1079009430899e4c5ec758eb4e6ffef729d0143e3", 0xd3}], 0x4, &(0x7f0000001bc0)=[{0xb0, 0x1ff, 0x0, "09f4737c0b6d4578d4e5716f426bc71482a5f4bbc23d3e6daf25c122e3b797bc39bd771e7119a0405dd98087f7893caa29f3e3e9fc767baeeebb19f2960ddc8a2135507d38bce39359da90c9732dfcf55f98de00e405305a0f76187dc8732d0f4bc693b1b4a9b0d6ea285123279b3ac0621fffc76ef6a7eb35eeb9e33506d40dc1cf1792d033b76e68c463955c0cab825fb59f93949de2b84a577aaa4a"}, {0x1010, 0x11, 0x4, "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"}, {0xd8, 0x3a, 0x7f, "57e82c93c449e06a7e149a38f00f54f941c4c30bf3fd2a58f1e66452f8ad59b7429569c6f6d0c55f05ed1046459941b2a237b69c784248e88b2a86c643a950982f9c2f20f4e4e6fde9c5f96d2c1900701699fddaa30fb2bdfaac454934711f2c6a02b1c3ef26d1561974cfb60bd54394219b17b4f10058423b85f0bf84105156eb32ea891b7528a4e82e3ad873b784f476c1973dc317ded9cf268beb7f84bd3ee23e4cb812a1b240d3fa2d6fa310279af645f7d16398d77c5d7f0f69e85b40a69cce2f2ade047e61"}, {0xc8, 0x101, 0x8, "f037101a1753e2d34c4d7333df29cbc078dd8564ecd90df7c02595c5ebec3f76590c402d5ba5c3f03036979200c4681ce5eef4306e3d3c8af159105705932e856d285578400b6ab2e978ee5231ee16f86c087ed5a351365fe70d27a460455173b89741495d789a8515aa25b3bc599fe69dacf2539257fe850399705d26ff0b687d2686e4f86acee041b022b8af26f254b4f5f812e026d20a7ab19eb1792ede603b165f347890a4f932ac9b46296ac8db4246"}, {0xe8, 0x100, 0x7, "e4c22b9efa0ddd5b623d957a91f4517f431f45d5460321bb7ec154c52b2a85189f821b0f8b53a19a8cb6eafb3477decc6c4373d14340e0458bd2a2f943059b8f9a074ac2854cc7c8deff6d639d91e7ac45f32e8cd7d9016ec3583752b120e7903aa53514ebf8b517c0e5bbb46817d4d2d19f7ecd2d9b80e46d37997400458d295238b46fc5813244b112a9f90e2016576bb95bd7123740d48df03817d224b183f944901037e798d43e1ce4317d9b5505ee5af1dfaf48def7e9e76b4a8aaa26cbe233075e3fd7aaed13b6fd206679be5cdb"}, {0xf8, 0x11, 0xffffffffffff8000, "7a79a1310da968b717bfe9f53c3817b96fcda94b0a307174c9020d2ffad796920a78f13587dc0cff92debe7fc2df536d43764c7a355a5a3a2a2dd13f493b7f3f8a617d98448f5b6f43ddc4ca307e4f717074ba89beae85113c1690c15d0d0370042ee9a2afd8946d5af4d245e415de7f33c41fa0ec5d36f470d5e23d06a45692d7695a63c9e7a54d6e17c486a13107783d0c6714f8e4185238b0c8b973258fae958778e3f8397413246de37c45b4f6f30faf768492de503df5ac10482f74393bce218c3de4f20ec849485bebe1d30b642097e56223105189146cfcc11729dbf1a2311b"}], 0x1440, 0x4000}, 0x80000001}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="b9cca79c24442dccda5b50f38812c08916626e2275c41cea892ada2f16d25b69cbd22023a1d5bf95958c467398ffc696710a915ca4290b0b4b6aa8955cac3c302c", 0x41}, {&(0x7f0000000480)="c2aaac843251d7c1645606b4d3737940c3d861b012caaa171bc0f0ac1a2dbf36e30f643cf0a4f1", 0x27}, {&(0x7f0000000580)="230e2533b89d0ec1289b4b08520107351c9f75120c78b3d7b3976ec80d26d38e8904a9e1cb8b5843d2cb381fd380354ae356ac7aa99f2ea96e2a9585db665c31fe55abe92f076f6cf4d33d7fa36e59068d62f3bb56ca7db5f36af8b61f3ef7fb8e9f4a7dcf55639d05bd8a10b69211cb237b66806c70c9e7c9b80bb32333842b4cb1d28b9837fb493f2c2de17ccb92f3c67502bb6fa8c702b89ff643eb02aba208ea93f1801662a576727ded054a01a82817f5d0bd4635ad05f0787a62f2023a84df621062305a896d", 0xc9}, {&(0x7f0000000680)="7078f03455cb84ccfb700bec0803f532d6f21f07d3081360b6ec669a549997e84ff728dd156390c863cf3459e94b80d72e93fa963a91de27d627edfbcf4d322cdd09bcf897cc5a30642a11d8c335cb45e0e99311ae0ed4fdef197745b6721731a860931605d57fde3c26c68271a30b815a53bfbfac60eff00a050e728733f5c6042ad8cda5b8df6a97b519ac8384959a8da7de5e357704a393eb37d8aac5b0dccbfdbe2bbfad3f37db0549d372e7fb91b4", 0xb1}, {&(0x7f0000000740)="347edf306812be38fe8d3eace42bacc138b3c5ca6fb18a34fa07e6a0070b7a277a3e58fbf4e3bbec6f9b1c3bf7e2f6ba527e6f26d0d154575187baad613f85d0c9b554dac2cb0e7ef560dc594d6e5723d269428520b4b96ff66955eada4c69936570bc606762a9c775145684dd326ce1488cd4bafcda3193662ff5e8dbd709e8672bc5feebd994514472765a07446656ff0563fe4b78fdad9064da79a07608828f09d7eb8d09531de30ea074da3d95d041dabc6224b1c323cae9c4eef20cb69acbd949f81f00ff2732836eb5987613af6cc78eae27ee1573ae77d8e6c98df4fbdbcbec9808a5764148", 0xe9}], 0x5, &(0x7f0000000840)=[{0x100, 0x115, 0x297, "6f188ebd039e8c4730688f0bc333491b9fab07cf11e9570840e1f888d096bb2d6294121913415caa17e39df5d2de1d7e073786890e611207896efaafc67198ae5668523c7aefdd84599cfb3e7b336e5915dc977140730aa84b3035c14b8cb3d7360013008cd29aa3d4a5f5dbbd1cfef89c234bd2b66c3f2f09672b2b082e6562676c58428788d475cbdc7e55d05e80a805e41cfb32dd7f32ff5dfb824420869941bcedd94d097feb356216c62fa6016a4164154af191aa5d4e14d5d25c99f55b21d9417666fa4568d8553a724f8a4b18bd62d213e61beaccfd5ba2acc85359e873b35a9d49920c4e414bef"}], 0x100}, 0x2}, {{&(0x7f0000000940)=@in6={0xa, 0x4e24, 0x6, @loopback}, 0x80, &(0x7f0000003240)=[{&(0x7f00000009c0)="792a938d795e874a361e97b5921daf47cb3189b5babfaa2c6222d1a903692fd2028dde084260575a1644eb0e0262f74e34aaeb8ba1039dd21331edbf487f8e118e9bfe4a427406451d39391b9d3299d4d644c507e141106d4c7d655d3f262a619dd309c4b26575acf82b3993d2579a6f648c4850f80082c352de3094ba6e6163200fc41bd4fe84a850247d4326f33a024e2724b6d22fc0917e3ab8ad49e75437be4e539f7bf91e15", 0xa8}, {&(0x7f0000000a80)="2c515578e8367ae916f7d4974ff0965b240fce0b743c3505616b70775d1ea8d3db8df5ad0f374d811eb247b34aaeeaf00351f8c3598e855ca59d5bea0e61e1b0e80c53a4493addd3c279489b59442cf90816959f21895a163762471788eeac6700e765c635cc2aeeb7576322763d42d532806c66a766cb31b1e83d2e5fc5d8368116caf7defaf0a251b7ba393e23a438e7eace4e8f56da212cd37091856ea70de8bcf309", 0xa4}, {&(0x7f0000003000)="5ee9b95b02c448bcc6814c06c2a497098de1a78c48e07f36d56d9d201fb331348e372646778fbf3a88e3abb6f48f4243aac75830860cd2b4f0381e2869112992a873713d50c0234002029dc3ef797e82957ecbaec731d2f24460f97a1d15834a022bd67c0d1ea20de24800f64a53a65379e1b21b1f69055dd68a2d77fa367d6b9a67c8d7c8bae4a77d48a76a7303df96cd29249664af7d8b6a2303aef3469eaf0cf6e65949c35b6b619b1e6f6a6b79e1df3e04de5ee64bd5d656572b6a717e224f72593b898defe9f1cfd93ca0398457760674b935", 0xd5}, {&(0x7f0000003100)="2da12fdc0f136fba251a259b98cba958e584c261b95cb40fd98713985eef2ea92bc4af20ca9f5270585aa3e784ff569e4d98f28f9b83c9c062d84741a638e2e071599efb4d8ed621bf47a151b9ab0350e0d9d7ccf221400f", 0x58}, {&(0x7f0000003180)="7ea08ed3ab498b46a205293a2dce4ccaf5039a3dc07339b8ad3af7ad27dceae778826ef95c5b9f353698c5bd448977bfdb1c13af374f848724dbbae98d0eb4904c280649dba1b4a09a66aee0eea472e135de724736f290f98fda1b4641866f654c7f19de62eba43ce16dc12a044ca059e427e2e93539b40b58e6b294f24f87ef056f840b0098b3f09657a1e662f7d6129b2d4f7da6f9e5", 0x97}], 0x5, 0x0, 0x0, 0x20008880}, 0x6}, {{&(0x7f00000032c0)=@l2={0x1f, 0x9, {0x6, 0xffff, 0x929, 0x8, 0x2, 0x4}, 0xad3}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000003340)="f968a8baa2ba6f73abbd9f35feb8c468aeb777ba3b6ab7e37bb712f2c505a3b35a07d2a785d0b17e8439d2f6a4ceabec12e361f48bd1bdc4330c92345995325b035b5aa1bc5b7b71424ba9302cc14c67cd0c11", 0x53}, {&(0x7f00000033c0)="3ccb2ac0dda8a6f7db2fcf4a25300308bc9c4a84a5eca4a6d70cef77c435fa08dbe841d2bf4c6b942aa8f28ab5fca26841b126386f10b962a104adeeb5f8acb60da359e16489682b5beb43c083174f2016fad42e96322e286e69fc971d2503fd231191ed4899aa3aeafdf45f44aaf2320533ac5331275d20991d1341eb4c92ab8b7d4fb30c6ce9388a2b6e542f9abfb2d7826f8a70602d8d39d44ca5c2461cbfd304650ef45f6243d124d618c6d7322e943d77f17e096dc4c0c07649da01f62b485f5d9d8d78729ff149c024bdec74719f133ca85842ced418136d7f21f7421e9b5ad66abe94585e2a5f", 0xea}, {&(0x7f00000034c0)="748de9c0ec6d5fd14254233584cc5cb6fe88405bd11090e49bbfc844152730e459d7ed231eab9c197ca3f385b1508e92c782bcb3bfec2a5e7cb997c8181b2c495cb49b97af948a5d05ef70bd65d6c1d77ff2a6027f729a7127bdf35a4e2c8ad99d702f2407ffb58099bf", 0x6a}], 0x3, &(0x7f0000003540)=[{0xf8, 0x19d, 0x100, "57f60b4bad722c046ded32a2e93410e9caec98d126dfd1a54d699ee42ab7373bdf5f9ab0519912c46adf3b58484e56f9b530baf4887fe695c1b7a83e7bb8133fcec69b2cb24b8c43df05fdc2e5f6b9e4b787cdefd8725f7d11e371d7a46b0d6c6744fa04bcd38fd37e22221c52ffbe77784f364d0c147854c0609927f1350472b1dfcd429707ec1849b4175c97fb045263e8ce3f3a237f8bdb141fa12b9097762eed751759b9f8b3078fafc5e3548331f2cc9feb20c38ed09ed6be8edf8247a7dfb823361897333a38f9bf20024a6484dafc7d21d42d715fcabc26beb69a22ccc1c030"}, {0xf8, 0x115, 0x8000, "0a5b285a3d201f87acfb4ec7dd5d26919b30c06355fe3b4baf077e4bd71057c42e16d2cebb4146b54d15453fac7f0e7d5eb9dc55a195748e2082cc85d8af9e8d583ce8cd14925d07a6b51e4b44c4c073a9413c76b3d143a996e06af04edb6da3267d3c65e3c130af6e9dd4cd4e976c1fe0b7d817cb77e10a78932a65159834c4042a80a92f4697685e0c23322e8f058a8aeae5cc7fd00cbfecfac34ad1f9547e6ed9bf57a1135f56dbf17e58a976bedacd28287caea57169b7bd03cc93280ef05157ed78c7770d85015711a41d28388246ccf1178a8b5f9163a20d472e005db49a5a155fda1b7936"}, {0xa0, 0x11f, 0x2, "6813d9cfa6991d772eecd3363f28d4afb78a662d1f83583f96f70caacba6ebe15a011a164c814ff61d80f8ff6ef4a8a954caee8c4632ff1717f5e24cfda9d09cb26e7f3bc3909d2c21871a919ff466f7ff6d92e8a76872a6b1028c2cadb5d3cbdd84c164c27109adf6c5afdd5c128ea26b3277877d7447b091335cb4db8b067037cb7d08aaa471e8f156b2b0c5"}, {0x100, 0x13f, 0x7fffffff, "5f8a76de5b843f1b9fc1084ff354adb26c894cb168be3ca05a83545eeb99baf67c1a8e6d78bf85b0f66b8718d1e7c9a174a437941c5cb99be77d844a9c587f7933c07027f7f9be1c276597a0d8e62302a66f203562264c3ae2a17223654e7d4228fe4f4e7db2d9ac4f06a1152e49c872edccb9f9aa50fe940e34d0e7e4873dcfd89a920b0d9720ec22435f5986dd49a1657ac0dc48c1f605a5860eb5b3333767b3c9ab9f2f736742af20ec44674117b9d08f524c904cfd84c000bffdf532d66a103195e877ed1001a593c639af877b759331f26e1ff22526c707e94274b65ca8ea9ffa30608d594c2f88f747"}, {0x1010, 0x117, 0x1ff, "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"}], 0x13a0, 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004900)="716e3d3823b4ec16b017bc6a17bf2c99f10f05069f7411adfe55cdd8d519fa671374bed479389b8de08d9fb6b243c1586273361dc9424b585acd48de33267e72e5f8284970cd790e658ec0ad33b8c9c2510839d2d88b", 0x56}, {&(0x7f0000004980)="86c64668be45385171c957f787f344246ac9518d37c6787f9f6af3be049b2cf7eedec3b9d00aa0dda81a6429ea24c9fcef56e33c5e316ea8a360e5459f5e55e05ef37c632e33521996a82eeb969b5bf5750cd492e1a0289a42eccd86a80bc3bf215e762c6a0c901f722dabbd6218030c8429ad4ca2fc3f1f9d563422e1d4c26e5207963b4da835d483de83c91eeec8abaaaa1e5aae2d66403b99a779b79948f8496a0ed4f4dd7391cd4ac9183ba393cf3ad2659ae6ea14106fd8c52d", 0xbc}, {&(0x7f0000004a40)="ab4c2b77c986d9728b942b031c832e6c1a454d95324d2311e2eebd5cc7cdc8039c5e5595b921d8d60e869168349bd8548ae42fc6968fbfb49a697e3a697c11a7c5b1bbc3b1de008b97cb99e19e539d290160e9bc82cbd5a0ef05770d881c132743ef022bb448e3ae83ae51bc42d8b8", 0x6f}, {&(0x7f0000004ac0)="235f668e380715b62de90932cdd61e740a964db17c7fa5298f93e6e1ced1c5bf29b6294680f5fbac7a2e81da5b98c80dc34ccaff5d69a9c6a7fe7c13b9f44cba2c0dae1c927a24fe34bdba8b670dc22edd1071969d4794ca048a36d86ef1221c7660365d40807ad12fda81f121ceed777e5d815705eff5cc0ef71891fe8a9b3fb176fc157cf67d192ed163584ba3", 0x8e}, {&(0x7f0000004b80)="a2bcaf1ff9c7d7458ed97eb11b7427479e0cefeb3fe5619f69138f6bcb080e0d0e921bcda3dccdd1b49ef6e65239de475af3e6a2e8e8d115d578fd313d2dbade5418b8e53123d8a2a1ef5592c2be821bd383de78f19b9dd23856b0009b7ecf38bfd57d32e914addaf04624aaf3b4e3a6b46f75a14521bacc1afe8e30125ff76c5685e5011eff3dff9eb782403265de213d4e1674ce87dffc681ff3168b588c0691746f7fd166c40471b5741e7f02925e51839177dc0814ba66021840b0e22b7de5deb9bd6f233e635da7de5564fd191219", 0xd1}, {&(0x7f0000004c80)="46eaf4af", 0x4}], 0x6, &(0x7f0000004d40)=[{0x38, 0x109, 0xbed, "ff1b711d4c1744fa4c113f2280a032e299949f2355beabfab5dee109a59b69abc4eb"}, {0x100, 0x103, 0x30000000000, "3e961e0c6770ae41206d7cbd82ecb525bfc3c4e4688802571675b32d67bdbf810dde76744a6c373fde9ca3ed1c4ed15934b5329b2d111c910177001f793a03ccf6a0fb9dd0aa12c53e0feaf9e4595d500386c6a0eebb841d1be1cc656a0cf98f15d7d209a2bd0f2846510a7860d6484bb0ccb32201b6d7e2bbf68ebe03e545999c877e78681ac82a06e320a2d31b4fa20c9920c19bbcbd1d18ec4249895d4a106ed7ded28c8ec89c626f05bd1399673ffa8b59d0fc3ebbaaef3f058ae47416c1d22551286c8f74b573d807b05fcaeb22aa707a88962bf967f20f79ccc2200e5faa06915180f5ccb51525074717109c"}], 0x138, 0x14}, 0x7}, {{&(0x7f0000004e80)=@ax25={0x3, {"7383ca9a9d687f"}, 0x6}, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f00)="e10183099aa8433fdea0633ce3dcf3df2c369f91f29e665aa9d1458ef410aebfc2af77d9ec6d8ddc6bc1db1e4d19e931cac8d74ee304fe865dbfdaee49a2dc295afc94cee68a764e5c2e3a65568805d4459c36642630b47e26502529eedaf786d99d6ce3a987a899a361612599656c4778303481e1889bfee8141075d5e3d7bbcb76bd742a2067bdad8ae988fef425b193413ea96b59174bbd599be724011f079033251bb1ce19b138bc514516ba2d883aac61b5", 0xb4}, {&(0x7f0000004fc0)="8a6fce09e7ab5c0fc97534c10f25efdfefd0a71b51fa44fe763fb9a98a6ce2a8894184bf7f150b41329fe0c66e0a0207f5144cb8a78459cba88779933d213fe22ee80afbcdf7bee51db8e2a709fdfa105eccff8738991ef1aeb928ec78b9e5d2d86c2df079d5bd6b5e8e864dc2900d1083a7c11540da054fd03f63e15973800db131296dd5d32cfaf3d766318213ce387ae2b5e84c8967e795189893b2da4efa258f7c9bb622d874bbf9045ffa498fb8b7d63dc5d8575698b707e77ce358f4f3dfd882fe0412b5b43ea0ade6671d0f", 0xcf}, {&(0x7f00000050c0)="e98c10944e1eda88c117b811facb7a83eb9ad382e34d820297c8044a5a149c68d83a674c8e0d1896a60af725538c28d97f0d5bbe779076d4eb7914d8582aa66d2ac598a6ae42546312bc3f888d0aa819d68b3cf3cd604e184b52ca4b079e65a6597002c89f698b420db7a4419790cf9177bcbe6597f232e78204ec0e1e7e9dd9d8490157db32fcde8a08f8316a8985", 0x8f}], 0x3, &(0x7f00000051c0)=[{0x70, 0x117, 0x100, "3d6a4698dd7abd388cde141103dd39bce61d87f215ec5b69cabb39892866cad3a346dc38276e77a201ceea9245d304013cedd0961bc9979ba22e5b1e8ed8c5f3b97f9316b7a1f199955298afe962881bcbb9e905155a667fc16851e5d15fa1"}, {0x88, 0x116, 0x7, "fbc96b1c96f77769d8d5b3707778d71c90fe43884928a8bd51f05b88b7921e38fcee35fed83bec8e0228424414e7b60389b47ecded308a3ba4a6c12bbe09a6086d5b9d735712bb7d9f9a7b7d6a0dcb2086e760f04bb732035f8930187ff48f57f4be2463525cbe42419503e7a6fabe672968735a48c88ce2"}, {0xd0, 0x11b, 0x401, "f45d66a4a830a09a2de810595a2c2f90d3d3e86f28967aee0448a9d85151ffde527688ca7c5a84a797e11b06172af2636a76539a9d65eea6ebfb1cb81170c5a09a04c255df511eabfec9faf012d38b3ad60cc145d5f183145b132ef7fb06b56d8f3cff7445283e5c265fa93391239e5ca6bf39d555be47d934e95e9703890f89757819efbfe638fa0e98a39678ad5fb6613c9a068f116acf6a4c3dadd9a4447373c9d043b1977e32457eedb6ae78b266597fdafb1ccf32e6e1a972adc5b3893f"}], 0x1c8, 0x40000c1}, 0x8}, {{&(0x7f00000053c0)=@in6={0xa, 0x4e20, 0x7f, @local, 0x3}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005440)="00ba34f8a98e2411003da0c95e4ebcff832248993e7b4a0909f419585e10b58a841617317a66a3a0bb07baede022baf2b87330b76b84a03436", 0x39}, {&(0x7f0000005480)="453a0ce70f7fabc101a7f2df130d8a1229e92e72eb988fe6b0c902698582206adbb40a79ba91eabac7f87536be34695916dc6853800451ac1a24cff69f153a8ae915aa23fa365a4320b4271a79327eb41d703863866c4d0abbe498d52530be880313bd12c561d62c5565ad9f876661e707e5a1de769b7aea4d86f758649d2bb3992b89da1672cd5ec4068a8071344a2dd0cbf567503fca446c505f9435619c909b38c77ad24e7954d55eb344f470d7b257dba6012ea350d31d41a560122f0f60e01c212b54138cf4bd32692410b9b98847913df074ec483721ecd238f9b6402a7edd1ca92f0d5ded40", 0xe9}], 0x2, &(0x7f00000055c0)=[{0x50, 0x10d, 0xfffffffffffffffd, "93b7cbf6e30dae862841d4401206aaeb7690419b9c2029c6df68a76a9e5e43cdc1ed57058e98d9d274b47a9c44773b777b4cba295c219764cb58c73c92b36626"}, {0x100, 0x13f, 0x2, "c2adac33e17fee0c3e1f3590298f32be83754b363996963cf297d4b6254cff8b3e7bb15eb175323732738a1f6474fe307624362677c65927037ed8840ce5d1e091f04a26b5c059483d2e5620400fac5980d51d283aed0106fec69973a754307428f973dd26eb2b8934e9f3a976c485965e7d5b5d02c94e77a303dba9d2c1ef7e3d79dc0206355adcacf02399dfcb2d5acf04f958ff688702acd6a838ebcec57ff39fed9eaf91a0c6cd55c8e8270b2750c96fe2969da49d751067ca3d6c101e33aff3988821ecb4903b007e6901d9b66c7dd44db94c71ae1938a1b51e3ba7c0a39e1978c66b7b7b168fd57a9bd3"}, {0x1010, 0x11e, 0xcc54, "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"}], 0x1160, 0x1}}, {{&(0x7f0000006740)=@pppoe={0x18, 0x0, {0x1, @dev={[], 0x1b}, 'bond_slave_0\x00'}}, 0x80, &(0x7f0000006a80)=[{&(0x7f00000067c0)="9626d7f84d64470c1aed30062dae0ed60eb0ca36a8b9b74e61eeba2ca08113f0b1f9531c0aa899fd670710635e7e656413a723723a9e009aa4", 0x39}, {&(0x7f0000006800)="4259e3160d132851ff37c3468d76c91e3ed2ca04ac9808765b3ffc69958df8eaeab011d5ea963a03a94d95f0830e4e1712e2094446124d9f84e66afced4d936b5fbc7f85ee7fe785974dec44f5f2be6680680a6632e7c3c241", 0x59}, {&(0x7f0000006880)="f6c4e561327ebf1f1a7bfd1707fd932ff9ab50c8e72e8169fc68aa705fdefb827d5e22c5f95e9fd01e3563c9551ba6533051534bea5e6e0c32c25c8c04d31d7bca9533f0c6310049c05c74dece6983cf70ffc1aa90b96a561644cd0ef8ca267cb053ee7c8a903d0c2e2f3078d1b522241ef69c5230c0b9eed0ad373e70240b99d50ad33c795af2e8c30b6ee22bc0e723f8811b91ca7f7583331e07108d0883965f6ac85c09c9465c2912030ea4", 0xad}, {&(0x7f0000006940)="973847eabb03ae89812c5265", 0xc}, {&(0x7f0000006980)}, {&(0x7f00000069c0)="48f18efcb752253ad1329886ef59482f01759c2359270895e78aee0cd4ebb51b0aed3e0a3e3e19a7e875411d6d4b6cde71fb7135797ccf7ab4f6a08936765f4a5bf48fb51e69928e87d5668f94330238320708a748e92f74a829c492b8102651670d631dd38a985f6e9e1688870378118bf93cc73fd2ae68d476cfabe94e22d63237a0516de8e23de6037a20f2a9e24e842d10fdb8c732681fb15d0a9eaac0227d766fd1", 0xa4}], 0x6, &(0x7f0000006b00)=[{0x90, 0x10f, 0x6, "16e5ada6aba921f3eeba9e1566326c25997f5a1177ed51a8ea968a710131443640e8813ef8a2464cce51fb856a9adfaf3820af102aab386db1765532e20ae8e32ebfa1592417ab1ce83dc9ee7043c0ae3d44af5824a0c9a407032365ab769f9cd2c603f07179ec50d45047025ca2f7b0140b215cb2f132870a3cf2c57f696ca4"}, {0xd0, 0x0, 0x1, "ed38b454554b8690f7cbb32d64cfc3ec28699ac759bacb019b05e21563f929c0fb221cb7197d327f697852775a823c1f756979f06d621a9ce5fff385808575500c7debb6bc4d2e5296ee6cc4bbefdf40e03cb29fabb89fd0a5ff27b814cde86ec7b0b7acd01dd242307f26aff139975610ea65a4f03bdca1d6ddca764f264ddd564cd8455951341a116f01c5c7471e0cf1605090db31cc42b79e7cc06e23b52cbe62c76345800045f61dc70bc91b3f50bc30fa544a064e657d1e2376"}, {0x100, 0x11d, 0xffffffffffffffff, "d2d2f6cdce4106346640a0037a9d0df1e79794c5d53ddc0df6a124d0928496d171d29c3ad473cdd2629426216d33472a286c40f9b61e69a6bb228833b2009964ea4bbe35cc4f4f4b03d7f3b702decdb2e25d28ae179a0467351af7967eabdf06d2cd9e6904bd4159c271bf40114185c866f3665f4b4537582963a7842eac7bc1855a4110f2cbf254c207ef202f391ca8068c8ef5fa324f299cd4cb68be144a2d577b66b74c48d020a1cfb85ef4b94c47eb5944b8680260e9bd1e4e82787ad33c1075f353fe539f5e695089a0852cff9cef873eadae1569f43e2801a2fdc3140928bb199db3180604b0eb72c51b0c"}, {0xb0, 0x6, 0xa473, "cb348331bcd01472c646dd1ee8a82b69edb00b9e049a7bf3e9bb88df1b9b98acc69df9f81f69d4e83daf6cc84e0e28e65b107a06d4ca1319e909256e523cfc74d65a8ee35854d3a4adab2c749c89c50a6c6172a2f28801f6db1e0a193dbb4798a2f4478e25d78327ccb51abe6913acba936845aecf774cb9ee3d550444b5656870541d62e27a5826ee698738fdd792cf4cf47f92b8dba86e84c70587df8c76"}], 0x310, 0x40}, 0xd66c}], 0x8, 0x40) 15:10:47 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:47 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0/\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) unlink(&(0x7f0000000000)='./file0/\x00') 15:10:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 543.523909] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.567717] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300", 0x5f, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:48 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:48 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) getsockname(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) socketpair$inet6(0xa, 0x800, 0x5, &(0x7f0000000700)={0xffffffffffffffff}) r2 = accept(0xffffffffffffff9c, &(0x7f0000000740)=@in6, &(0x7f00000007c0)=0x80) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000d00)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000b40)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000840)='./file0/file0\x00', 0x2e1f61f1, 0x4, &(0x7f0000000c80)=[{&(0x7f00000009c0)="26570a3a1cf9faa9d0ed", 0xa, 0x2}, {&(0x7f0000000a00)="ce27367e44bd1e9b5ac21a8df4bf2276d5fa33a104f9c8194b9c93c23abc5a7426d61cb367f6e3c86ddf786fd20a8e128979f1e437bcef4ef3d43582e96598c69d6b17337b8a643e2ddfed3f6331bcfb0d61a9e3fcd51e28a8dd727c5cc00a442817b576e493b5a7d1b5b3ee785c007e5b73de2bba72eab51ef6cce3e88671ed3cf25d2024c7b0a557b784250a51be60cdff9f2657484e74abe970cecb28d01e26d7f12b100c6ca222368450ad057d8c51b2dd0438e11327b2d6e704f943d9d34287301ab742115d4ef40b98409fbf4c78abe854d221de2863ab", 0xda, 0x5}, {&(0x7f0000000bc0)="563df5ec31688c2671c8d933180a53f5a0d9f36e5c115167b42e343427e8e0189a5e9bf30269dcec42c5c746da7ecfbcf7c92e533c92111afb82595ebf19e122db4479a3e8b71b1cef7222de4fe608678bb0982ae04da0c4a59e20771d6fd0a35097dc7e25be7367fac72aa9ac2f7398d1851a309ad450cdbcace72920d03826ae7f7d6d736c83d6749f210b517f501f5fc09105111c738bb6", 0x99, 0x10}, {&(0x7f0000000b00)="ce15fabc5116946daecdc8a6b52170a9255b7930aecc1b65d8dc167a2ad2944a6bdc0059a573c49532ffa245c603a8444d2f", 0x32, 0x7f}], 0x200408, &(0x7f0000000e00)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@smackfsroot={'smackfsroot', 0x3d, "0000000080"}}, {@fowner_lt={'fowner<', r4}}, {@seclabel='seclabel'}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@permit_directio='permit_directio'}, {@fsname={'fsname', 0x3d, "0000000080"}}]}) timer_create(0x0, &(0x7f0000001f80)={0x0, 0x1b, 0x0, @thr={&(0x7f0000000ec0)="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", &(0x7f0000001ec0)="515b486200de6810246e1235a6c3afb4d7afb868867b9b2aab8921a473098bf3794727e55c98993fd6e13faee060bb4938c40f2aa6b73c9f65cb807005453ac760eb738b381503ba2f53639f78b3dca050a1aa411d0360989cfdc9cb6d2b0d0b97c860ab461339a03b441c714e3c0ac0b06c745f02ebfd536f0c1e618182bc428beb9f086761a019097a3174"}}, &(0x7f0000001fc0)=0x0) timer_getoverrun(r5) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000008c0)={0x6, &(0x7f0000000500)=[{0x14c4, 0x478, 0x1000, 0x5}, {0x8000, 0x7fffffff, 0x8, 0x5}, {0xdc62, 0x88, 0x7f, 0xffffffff80000000}, {0x400, 0x7, 0x7fffffff, 0x6}, {0x5e38, 0x9, 0x3cc3, 0x100000000}, {0x5, 0x6be, 0x8}]}, 0x10) rename(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940)='./file0/file0\x00') sendmsg$unix(r0, &(0x7f0000000880)={&(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000100)="46edb37e958a", 0x6}, {&(0x7f0000000280)="9c8d564a31f1c8ac5a9d94b90850732e6b9b86ceb4679843e2ee4ee3e88b586b0b41caed4b32d89007112407999a8bc2ed93ba75358170c23ee426af739c40ba30da95d17cec2988f8693cafbee6955661659886b1d68c2bdc11c0fdf1911fe30548762b823651bedca9f36076774903960df5b84cf65f305cbf6075c57fcfc51c253e7f7d5c4a1240023875bd6c48fc0a9227b40b387c4c18fe1620a214878d620b2767d9dc86d5a39c478a4fbb51dc0dd22ef31f5fc5824d8ee37c039ade3bd317508bb6802d5f233968ad719d69d18eca2555928acd1ad10290e9b3d1a39486f2cfcb3d02fe981361ef9fa9269d1ce373fd4b39fabb3c6761", 0xfa}, {&(0x7f0000000380)="7d13ed40cac865b3cb75357f095c8521195146", 0x13}, {&(0x7f00000003c0)="f31efc5a86c1a5cbec346e07c0763cbc289d6cc68cfd2f363a3c2c44c16e6c2a870b99b5510ada4d347d8ded8a158cf223c5be21f5ee3e811537b249efd09aced3fa7d8e274c0c72646ad783486f67694972249ca7388f7a24a56c63c957e2a9445f220285410e65c375e93e8fe0b5f69de3b5e4103bfac3fbf0b8688a4efc40da182a22e80c3821a24aa5a9f868d2e136ddf1938dc71ed3e134bcfe90b3d15d63644db2e16386f49c5df368fd08816fb7b929cb27f4ef", 0xb7}, {&(0x7f0000000480)="fa75fd45ed550cd24f2321a6b15f3f3099691eeb4c3438014d1e365f7fd207356dc0e1ea8b378530a67252b675436af7cf1506a41b70d5dd0946afbcfa1930458202dbf2c8a955db0f0fe2eb491ed13fdb0d17044c644a29ba227c10d78bfe27c538b8367e08ffe5243ea1b436e5f5780dca7f678f427cbe1a559be42294", 0x7e}, {&(0x7f0000000500)}, {&(0x7f0000000580)="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", 0xfe}], 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="002a14e47c942729d8b198e71562a344f2000000"], 0x30, 0x20004004}, 0x4040000) umount2(&(0x7f0000002000)='./file0/file0\x00', 0x3) 15:10:48 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000040)='./file0/\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) link(&(0x7f00000000c0)='./file0/\x00', &(0x7f0000000100)='./file0/\x00') setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) 15:10:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x100000, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000007affc)={0x0, 0x0, 0xed349a51f320a8a3}, 0x4) 15:10:48 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 544.351312] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended 15:10:48 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socketpair$inet(0x2, 0x3, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x400}) unlink(&(0x7f0000000040)='./file0/\x00') [ 544.375936] kauditd_printk_skb: 328 callbacks suppressed [ 544.375944] audit: type=1400 audit(1538147448.654:28099): avc: denied { map } for pid=24655 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.401288] audit: type=1400 audit(1538147448.684:28100): avc: denied { map } for pid=24655 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.405226] audit: type=1400 audit(1538147448.684:28101): avc: denied { map } for pid=24664 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:49 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) [ 544.418620] audit: type=1400 audit(1538147448.694:28102): avc: denied { map } for pid=24655 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.422817] audit: type=1400 audit(1538147448.704:28103): avc: denied { map } for pid=24664 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:49 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) unlink(&(0x7f0000000000)='./file0/\x00') 15:10:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) rmdir(&(0x7f0000000180)='./file0\x00') removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') 15:10:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 544.425864] audit: type=1400 audit(1538147448.704:28104): avc: denied { map } for pid=24664 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.437545] audit: type=1400 audit(1538147448.714:28105): avc: denied { map } for pid=24667 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.439106] audit: type=1400 audit(1538147448.714:28106): avc: denied { map } for pid=24655 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.440998] audit: type=1400 audit(1538147448.724:28107): avc: denied { map } for pid=24655 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.445353] audit: type=1400 audit(1538147448.724:28108): avc: denied { map } for pid=24664 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 544.722620] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 545.878116] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (2 blocks) 15:10:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300006b", 0x61, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) 15:10:50 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:50 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@rr={0xffffff83, 0x2, 0x0, [@loopback, @remote]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000000)) 15:10:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB]) 15:10:50 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 546.207638] f2fs_msg: 46 callbacks suppressed 15:10:50 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0xe0ff, 0xfff9) [ 546.207648] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:10:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 546.288846] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 546.343930] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(3) 15:10:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000027) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) setns(r3, 0x20000000) fcntl$addseals(r4, 0x409, 0x1) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x40000) write$P9_RLERROR(r2, &(0x7f0000000040)=ANY=[], 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000280)={0x8000, 0x100000001, 0x3}) ioctl$TIOCSTI(r2, 0x5412, 0x1) unshare(0x40000000) fdatasync(r2) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) fcntl$setflags(r2, 0x2, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r6, @broadcast, @multicast1}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) ftruncate(r3, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x16}, 0x5, 0x2, 0x0, 0x2, 0x69, 0x0, 0x1ff}, 0x20) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x30}}, 0x4) [ 546.384707] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 546.435960] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 546.481290] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 546.521609] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 546.567299] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 15:10:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300006b", 0x61, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 546.586784] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.586794] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (29) 15:10:51 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x4d, 0x0, 0x5}, {}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 15:10:51 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 547.074551] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 547.136522] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (29) 15:10:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300006b", 0x61, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 547.344196] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 547.431837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:51 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000240), 0x8) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 15:10:52 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 547.780225] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 547.789106] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (29) 15:10:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00005c8000)="c340", 0x2, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000027c0)=""/83, 0x211}], 0x1, &(0x7f00000028c0)=""/87, 0x57}}], 0x2, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() tkill(r1, 0x16) 15:10:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300006b04", 0x62}], 0x0, &(0x7f0000000140)=ANY=[]) 15:10:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000240), 0x8) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 548.472259] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 549.389873] kauditd_printk_skb: 401 callbacks suppressed [ 549.389882] audit: type=1400 audit(1538147453.664:28511): avc: denied { map } for pid=24794 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 549.444589] audit: type=1400 audit(1538147453.654:28510): avc: denied { map } for pid=24793 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 549.540546] audit: type=1400 audit(1538147453.684:28512): avc: denied { map } for pid=24793 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 549.590467] audit: type=1400 audit(1538147453.684:28513): avc: denied { map } for pid=24793 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 549.629652] audit: type=1400 audit(1538147453.684:28514): avc: denied { map } for pid=24794 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 549.656066] audit: type=1400 audit(1538147453.684:28515): avc: denied { map } for pid=24794 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 549.733315] audit: type=1400 audit(1538147453.684:28516): avc: denied { map } for pid=24794 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:54 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x88080, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) 15:10:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000240), 0x8) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 549.786630] audit: type=1400 audit(1538147453.684:28517): avc: denied { map } for pid=24794 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:10:54 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300006b04", 0x62}], 0x0, &(0x7f0000000140)=ANY=[]) [ 549.927538] audit: type=1400 audit(1538147453.704:28518): avc: denied { map } for pid=24794 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="400000000002000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef01000100be5a000000000000000001000000000000000b0000008000000038000000c20300006b04", 0x62}], 0x0, &(0x7f0000000140)=ANY=[]) [ 550.053771] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 15:10:54 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) [ 550.180162] audit: type=1400 audit(1538147453.704:28519): avc: denied { map } for pid=24794 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 550.707472] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 15:10:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 15:10:55 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:55 executing program 1: syz_read_part_table(0x2000000004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c00000069e97250000000000100000000000000ff070000000000002200000000000000de070000000000004e76b15f0eb90e46a14691316350ecae02000000000000008000000080000000080951e0", 0x9c, 0x1c0}]) 15:10:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000004600)=[{{&(0x7f0000000180)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="0ac68a1ae4461f43d21fe0e47d84166b9bf6b5861e6f94a334a2fcc4dea2d39920823047661bcfcef3d49034afd4f87360b57b221845326bb59b579672fc6851a83701718b737f270e5c07514b72eb05bc7fcb729fd5f4508025396ca5eea2087d41638bedd11894ee962e2583428b383b66109f5d23a261ce9d7de71fd87149815419f9c0bc17ffda2fe27964658b2a80707bfabc918b6264286df39bf69c663946d675038af02c70069fce7dc8065bd7fb3bb078e80894dd3b139d58e99a080703a5571d0a90f8883b82a78a214b3a4e1b51671bfbea8d46cb33f28754d019c285", 0xe2}, {&(0x7f0000000300)="7ae618207caca75864dba5fca4107d1a90dd276daa9f113e45403b762fb37b875763a143d111628a0b2b850cb650abbf5850ab364c6707c9d91cb0ab72d8f534ffd050ed6c660cef855a1038854eb1b86c61099554bf04c0e7eafb2e8f08dfc191f90e0b063d01d88f00c8ea4434cb3cf99f8d33a62568fd918525a6f8c3e7e3ed12ff113091aecca7da9f5ced4d82ec6e53d5d67a81cd2deba32c5244e04214ab5c9ac4ac8b175e4858333d6bcb678dde50d89732efd044c581dd5df92cb72b89686f197b14f79b3a0f1af129659d2358b0d8906f6fe11f976a453b6a7dd1e84e521259ec7deaa193bfe681de", 0xed}, {&(0x7f0000000400)="01edc1c3fc16400e82f720aba49264a179e18a4c027f9f6922f2feed9da9403b75c003b68d70e3c04dc716334a4a1a48e7aca59277e504fd316d8dd741fd8d888423cac3dff6f8f326fa1042a526b672d9543c53ee783b0bc76173ced57e58068cce963ee079386dabbebb1e493edf02484cba4d5e2f0466924df54096e1b97fb320f270b428c1b1c1710a8e745f19125c3c71ac138ba3ec13fd201b5c7ee257789146a10df56f509f41fa228d34b39ebb3c47a966ae31a2255e03e1ce66f988461611361b43fd14c79a006a3fdc56db", 0xd0}, {&(0x7f0000000580)="359f843a4230cb3d5c286bcc8d20d9e99453e7b9e63d438c5c54b4526f3cec9f6ebe94f323abd0a5ab4c0adaf58baf21b0d7d39dc312dc413a9bd8ad57e700c8f1a5767ba599ac7890279e4ff52cdc46b2b9f51a9606882b45c412adcb2ca2", 0x5f}, {&(0x7f0000000600)="5bedacc7a99e116ffbc303507c8ae1a5143dee973975917d991b97197cac054586811a3e61482c930c42b25d669a0886e0ff90dbe023f8c6286bd2eda4ef13ea87d29d4950ba5f2fc65970e070ba65ed706d49a6cdc3", 0x56}, {&(0x7f0000000080)="6810e25563c38217b2ccdc467ec0de201e71", 0x12}], 0x6, &(0x7f0000000700)=[{0x68, 0x1ff, 0x5, "b2e227c97fb3081ae5f4abaf7980703eed1fffc4d29b696a6f198c218c93eaad288b81542118731c1b8d148f84459f0a184f7a9a39055a0882ccc855723520104fba9f1feb1a2501b361c1dca07aaad6a1"}, {0xa0, 0xff, 0x101, "1e86512673ce3bee32e51b4619ac0503658ba8c098fbe176ba4026770a71bddecad95e9bf5c1c7b19155a5207a54aa6136057b0432a079377b85160ce5098e40e3115663d5775f90b5d0ad7ebb537e17691c85da3fa81b859503115f0cecbff7adbc93e7b29d87264a2182dacec1a20664e193f15a7d83ce4820645f8405aa490f411c8502314bf26d9fb734a50522"}, {0xe8, 0x10f, 0x6, "c6ec8924e79592f7c59e5a61364f261cde7c927e114c583eb1be085f2d408890b266cec2bf5041356cba1230cb6dd1016681612374a42cdcab73c5d64035ceddff1e1df9a4b91c758cec474c91fdf595cae871ceb40368c84be6c1f810955253a2bbfe2dae5e745dfd0aba2ac7212ee73ccabaf1518518659c635c8e113802f9801cb159885cde729107f5387f1cb9ea0b64d433dd896ceab3482f48a88198ce98327dce09fdd173f21b73f1356c5b2656bcb7321469366fc07713ad4bfc53c8acefb9572c2b6f511d4ecce51e962a2eb08af0338b0fedd9"}, {0xc0, 0x108, 0x2, "ae2092d44fd29183c4fbb1d8717a0fca0371f3006e4c60bda766a84588e005d92cc5229f3d18b469e0b15dc93a9549390f191c302a47ef5e60a6e14236df02fc017458a77c1f46e2a1d2f3e700ddd1e06dc6fe8918c021a52620ffa039b777cf2aa65636dcb40e310f3747edf201aa247ddffc19c32a7f7cffaa5a68e67afd59737c652066e68f91cb9ac913f589fd031c3c6f6c9c7e7422cfa62395363aba09c95da49e791099babe7c"}, {0x60, 0x104, 0x6, "64a1ac590ccb0c504001e881407d9af4432c430c0a9e6255495ce259ab38ac27a5abbe9484b534637df74a22ff79a743c132ef889534454e9c7de26f0ec69bbf5a91b71712b549ad5bd9d750a5bafbad"}, {0x30, 0x100, 0x5, "24f762712403caf40a554e96b66474e954f7911baf0c0034e480a2c3931e"}, {0x20, 0x111, 0x1, "5a9e8fa989cde25f3e"}, {0x28, 0x112, 0x8000, "fd2e088c5861ddcbc3175f0c5eb2373d1e"}, {0xf0, 0x11b, 0xfff, "a7a8576bf20dd86eab7430c9d7d1c9e9ba4a52f1c3f8cbc797ada2c791acbbf01dd761e1aa8e02587aecf28db179a5974e992bc80a9b853c64d2dffbc0add1ea2e340071916638a13c6bedd148ca55bc0d7f95bc057809c536a6ff07098016384653179e4d3697b36ab14c4ef8acf48ff3cc9772ea9cb08515aa655b861a08bb9e3fdffc84acdf87edb96bf8c9d9988cecf1c257879f77628cbf1f231b3904491e07eec9c914c4e3b57aedd8367e409b94a5d744e3b7f29095eff30cc7c57e476909a79ae0447b4e4ed3e220696a53401ad74069c28dc3067d3decac6f"}], 0x478, 0x20000011}, 0x161}, {{&(0x7f0000000bc0)=@nfc_llcp={0x27, 0x1, 0x1, 0x3, 0x7, 0x3, "45a25873df94f817840e519df4d213b29b7196d007f08533ca6ca81c2b584105d6b0cad2f2d99c1a51c4b9a3178a91ff5aee45990ad0bf8838208c12c8e76d", 0xe}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)="aa48de08cce3c123aefdd887cb45c782af06232e4316a318ca34009337f0ae8084c833f127e6166cb5de3b865a8d95aa677399b3a15119d2f7048e2b8b44627532bf67e9514b5e0971d973524b68c26d834db60068ee1083c5c79210142b572fcbb29504604f6e31057a8b4b3af6fa21a0c5109ec8421698b8865902fd9d6c25912b677ac8f517a35359f2e8756026dce7a4fdd2cd19fc473e26c16c2d3509ea81", 0xa1}, {&(0x7f0000000100)="a92d468cdcd04e2d0e50d59db4c9284e2713c851a2bb803398dba7d84bbfce5b9a51a28c575f37bcaaa3d48a994e6196481bb4", 0x33}, {&(0x7f0000000d00)="8e15dd53398b7b6a00ea4bd389deb1d9b4742b4ef3c2306fec6eca1d05a4a56882f6c656764e42e9299ecb1d9b18016e5d761f69ba27af83b6897cfdac99f577e693d21d368a7b7acebadbe5dd35c586241d6b99d2590e8620aede1973c7e55a75", 0x61}, {&(0x7f0000000d80)="559f46edb0fd85804cd97fc9efbd608cb6f4db6b61a3543e1da7d3c79681d1e024c7e68d12eca767f61904dc00d8642cc9a5656365ffb5ac9d67ddf9097e17d168e4bd504a25482e9d9db2c041f841dd99f1d171b3553333ede17debe6ded937b7ad7b5f078991ed3c17804270e0741bfed2fe461f13ad97057d0b1d6be2d2e694b854a759", 0x85}, {&(0x7f0000000500)}, {&(0x7f0000000e40)="2003e93c4075881dc60d1c2e7c720cf6aaa05293ea0c", 0x16}], 0x6, &(0x7f0000000f00)=[{0x110, 0x119, 0x5b8a, "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"}, {0x108, 0x11d, 0x0, "cf7b074a3ca106b07a567ddaf73d035fc95237402e9768babc47938eb05c9a0f357956275676e2d5d08d99fc59dc6ec1e4afe7dae4b72f8559fca1fd5b597e6dafe4a615179087043906b4cce4a7cb78f48469a9c3d6ccc4d5e86c58cf0f5198a2c857e51a9ca90521fada07b1521f78c36eeaceb8c5606ac7bcdde3f243f02a33af58438b3f227efc24de4e9cc4973be07f46477322dbd19c6cbbd58e4732a55993ffadbba49fea614cc2bd0854896cc33c805f90fe4c5af3982d3811dcae43be391027517210126b638bc90e1e07d86ebb75dedfecb7b1d671b02cea93002c0084a70501147f7741b1c486c98a8e519df16698586864"}, {0x38, 0x104, 0x10000, "9eb24cc86c4d6b674253439ec10e34e7fb49bb1c1522ae4c54c4f90aea9a65475e54ac10694e4f"}, {0x88, 0x119, 0x7, "2a40b2224b59aa5f0a760beb33f1a6917b374b1a92f014fe52392db236d35fdaef9201f300d79fbd26162b91d26565d3032dbd76a39b707acbcb7b794d0f9e9a3014c55f525e855cdb209343083e1be4539a4bd27176b5a01a443d04f8e738d3ed3c3f9db75f079bce422f3df3b08da7e7e904010d854f"}], 0x2d8, 0x84}, 0x4}, {{&(0x7f0000001200)=@rc={0x1f, {0x3d0, 0x6, 0x3, 0x400, 0x7f, 0x3ff}, 0x8}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001280)="2f097a4e17b5ca5e24de49817679cc4653cac08565202cf411091a8ab501f0523393a78425a6082fec4b70d36b7b06455ee290f07e0f08f2a66274b3b317637f37c60f9d4029e16d78d1e80f786d0763703ff5bc52e93655", 0x58}, {&(0x7f0000001300)}, {&(0x7f0000001340)="ee6907db00992bc75c88530d30a0df88510cf9578f2390ea05e1862c292e7331fd2e3d1e9b7cf6427c497eb196fa2975f5e40aa6936a6ce879be372a20d665dbb0f2a437f51012e996ecec5bdf384ae178f2ef19ff9b831fa4ce127311f998b2ede99efd5064754178a36c2ceb43", 0x6e}, {&(0x7f00000013c0)="c25d5a517db3addae97ade1f6aada2871eafbc46413a6f6f465d8784c831db404d40f24e", 0x24}, {&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001500)="0799c2cecbb962a55c74e47e682546e9e0d36d485305510b67a1627fadd2baa53c36e895d5ef5d11895a93b15f465e66a12bf5d786755577740a74a88bea92f0b370d2024d2ce175ebf478e8c4a232b5b0b208ed7443d09cb147", 0x5a}, {&(0x7f0000001580)="12fde53caa06ba9e12f6d5b30be5b6286f64bcb01f512431662732f4dc", 0x1d}], 0x7, &(0x7f0000001640)=[{0x88, 0x10c, 0x1000, "8d00af3f737725590f0538d441309fe0861b2de65c3b9c226698d0fccf978d23df53029daa39251ae273866a9a8652230fed274a7b381aa58d0a11bce05bf41efd5f84125183b48dfd1fbe88fdc7eb45de95420ec128a52521ec7e39c10c40397c237926dfe4f5e225e2b3c000d9247b76"}, {0xc8, 0x10c, 0x9, "e8899f7acb0fc6971993cdb25bff449e86ae2aabf1ad86d467d49868c1c90985a180bc64ffeabd558a017dfe3730e7b4da55c1c132f7ccad1cf00cb0c411147c146fb6a5e0031afb282464d12bcc5f23b62f89d2f413512b41b8db123833b1814f6e253c6d6d0649bb558f8610961672785a496d6c1375b4dc842da50d8ea403566b1e9ff7db4ec63c31c3dc301ff6ade2750c02a3ab94522d82d1971df6d9a8a695f99e7d218fbf5b836c8f3e9cb3e1054e6d40"}, {0x48, 0x110, 0x8, "790ce2c5a40f550262c97d7932bfbc425670b8f22bc89ce6037b094054b284ecb296e4167e5471d2012e650fedba658035037658"}], 0x198, 0x20000080}, 0x5}, {{&(0x7f0000001800)=@sco={0x1f, {0x200, 0x300e, 0xfffffffffffffffe, 0xf71e, 0x7, 0x2}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001880)='5', 0x1}, {&(0x7f00000018c0)="00552c9fa867bb1a849182af2534a616d37a69e19e9a29041d7f13c2a0235a3744216b2eff3c65f26e646090c7290992e56e512c326622f182e9ec775087", 0x3e}, {&(0x7f0000001900)="de21fc19061ecaa3747748d50e69c969274a2c4ccdff084d49a67ff56e08663bcb8b0caeb99adadce174166ce6c36fc81b56cce48fc8af2fa1ed788e9f0c3bf125044dcda8e1961bd9ca3b2e69e583799669757b47b99ca3606315dd53941c9b67170ce5995d07f70b3688f73fb43fcffeba626dbf2ef4e35f5f0e74042a49b4cbd7ddfbb8ceb958aef351581c5b4c6b295688e7ced3732839a155b484be80b3dcd3d380fa828145d855", 0xaa}, {&(0x7f00000019c0)="669b1b8b1028ed79975b829ef0d0079baee35e1f63bde53ef2028be5e6d6dfcb25aa0029fb52c094e6f4dc90d2bc2b49aeccf5b86f4c06804de905f7a38f390433f267ffbc3695b324ef91e82f6f565e439d5f98c95071d0ecd01c2ddb99fd25ef0a42139feb059fa79f86077361062a996a46675f7a1401a754ca0e7c9e4ca38bf972ec8f9d202bce099082c17831670ee7d49a47232c0745f839019600c9bae1c516045e37fe4ff84fbb5746374278253a1200a6008ceebf14e611cd778a913018494174a5b1e8efc926960212d7be7be603ab2fd9591aa2a300e6030aa2c631ad1b4be9cdb7a45e64b3f72b15e11878deb8fb68f33b", 0xf7}, {&(0x7f0000001ac0)="e06863e8041af6b63303114ddf62c026909bdbb8980770995bd7cd6798a66cc324", 0x21}, {&(0x7f0000001b00)="4c11db0295e30b1653ca547056fcb8e70445da136465aa305537ed88080d6502780e51517bad55f6481e2c9fedb072adce8ba485e9eb5f2abc335567eb44f36b99276cdf4c8f80e884eb5e0bcaac2e107c9964f05f6fb24852c0b92c3108b69996ac406ce4b048fd143d05c5d4ddd11dc1a6dbcf1add1a8fd9861d3d6ef01289a23af9f45625c679894ef9c7e12679e788ff648ca33800773d1d1a9bc3339f1b46ab418e625c2df2cd8cf60d5e8c91c2e593f76ce3d54d235f4bc2ccaa9bad6ef89a2d44015978136821cad145ee5f92a9af0123d21f98b776983b7a3d7d325a7fc79bf2752270e33af5657782437e403b993792", 0xf4}], 0x6, &(0x7f0000001c80)=[{0x28, 0x117, 0x4, "3a3b27c79a5022832ef9f8765b8fce6dc107ce2284ad"}, {0x1010, 0x6, 0x20, "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"}, {0x88, 0x118, 0xfffffffffffffffe, "4b7a216b1391867a360d5aa61fdfc7a707f3e25069602cc9b8780d48d5ad9cffa0b17f77ff3e61d4c28627af0faefe268a78fbf1c9df79a99f9090da6f55657ec5f89f67caeae6c91cc5a6cc9f2e1d09dd8d50fd56e6fb4cc8f6e48c77f2b68c655395bf9c1235a496a75778e59c36f8b552"}, {0xf8, 0x115, 0xccdb, "62ec87cace51414459b8f5a990846f858658eccef28763f4eaf09db2d6ba082ad3009df40714de49ce7130c336ca5b188f8f6b112d96df9544e55324ff1cbb9f621ff1ca239b55ffad0737de53feaa27dc41e9f124b2ec89faf09dca5a31ec7e6cf86c7093e703f5382056d134de8e87fae86e1a957c634073f34ea3f8380a798ce553090b849b70266d3beb8fbe214a2c6e27e578006d3585eab055d618d07a910e779a9da4dc0977846824535ebad10aa6ec47ef2f510b4e1af4eb390ac62db323dbbeec76b47bb0e9a4b367e48d95eddf1a55675a1e7cb609a1ac4f4fe1687751"}], 0x11b8, 0x40800}, 0xfff}, {{&(0x7f0000002e40)=@generic={0x1a, "9b2c8391a7dc15fc6639c36e9f6bde4561b053d7c49c91dd8f20b19c1dab7fa207b6b11d5bdd08eacd5a0bda75599bf673b0e9e53b154efd1e308eb85257f5a33cd26ba155c923202ff1ca7e4754be953003623c330909dd525aa5b847270f454725755c0a8499269c89e8f9be469be17fa2162a57804bb4630df903146a"}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002ec0)="6ca59519adbbaf26404093c128e1e3c5e50871be468a265672864bcb3d2dce0c117a0758f1bcacec0b8f4e63cea07a3d24d0b4fe17bf89dace49", 0x3a}, {&(0x7f0000002f00)="9d3d3e22e3b1166eb6c5e8d899b2af8e4a65dbcdcdc7547bd47d836c16f1a344b29ae62630d93007b659f3abdce2902bd65d298073f757d54ac8bb12ace0cc1a6a5b94044c1c5e2beebe675cc2dcc46dfb4b3c328fcd678df75703a2e8490a6ed63c20a93d43628a7df7eb9c82e6c74448d455df3a", 0x75}, {&(0x7f0000002f80)="3bcbb0f2d5c12192db0027db9bc77aa292decca1eef7ee9cfbb4b707d84e7e764f042758a615ca327e81dc4df48feb6cc9d9257309886c69fd3ccf05e17a091f7e8958db81223b86d21c54ede460ab1fb501010017f3b3b995df03703701aea83d26c154d72029050d3507c501c41021657cf17a0ddb4a784464ad600f242e3433a69e10be7cd75dbe3e449756bc326a102bf96db6", 0x95}, {&(0x7f0000003040)="96f30e72017239105625df7d55fcf323819908d406d741e16127878ef0b261cab2ed8676e451245c75dd3e6bab4917151687b300984471e9e3c26258b688e9439ed27fe86307ed", 0x47}, {&(0x7f00000030c0)="05578b13e81288ef37763c55fb1ab0d316ef199cc5bb577bf0878ecad85069974c53f6a0637e4ee981a52f1bce32e7ec4ac705781e345132b0449a1636c10ab03fd5a3d5ca8ac97e465fe4ed4ae4b01373c7c3855a2ce3d159a0ea866d7b8d7a75431f892b741faf592ae3e964d7798a64cd341c19ae36bc028f03335dca4f44b954580d97ef8b008159395b21de9a08a409a896b6590870713ace0aa1637c0b3438a21c21929dbac1b7e4a94acbbe1ca05c57595d5600d5689c17a2719677092f0ed8a1703d87d160b3081a1ff4c07c6620111624d506477e11", 0xda}, {&(0x7f00000031c0)="cc07b8990dd9bcef8f98bffe007d3d43e10961e8ceba0f18b89053ac83", 0x1d}, {&(0x7f0000003200)="3172bd91abf0c6fe8680dcf5629a7976a42ebbb39f0a3aa2337863bd043e91d1d09733402de1bce177563ea12061bed28fa95d43293687cc3adc7769f59c87f118faa2fff6a7d292888fe636fd61f842257f720c01b26843c5d506", 0x5b}], 0x7, &(0x7f0000003300)=[{0xa8, 0x13f, 0x4, "e34d10ea727917f82ae7ce7349758f94909e7f9fa22a7c3a8f56aff4ae5d989e567ed5f0a81ce5a84b46aa92a4430859a7b8d171e3c2614b1e73c834dbe4be66caba776b3ca17f3ec10e861ece6cbfa232eec9c95416f7217f92df2f7354c34cfcc3c12797780a47018c5a051d8b4197b4b7c35d1b81d13d413a1c320a0d0c7fd656e68348f932a7e9243434f3451f0e25ac727787a772"}, {0x1010, 0x10f, 0xff, "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"}, {0xb0, 0x109, 0x9, "7b864ab31b3cae95976eef24fd8c46f95308ab8ec4116e27ab08f773b78e3d955588a80bbd68150371f5ca93a8a104f9501dcf233a5c7e40b685bf0ea76bad152bcf72037cb3a6266dbc84c1b77a8b9d14351105cbdd8576be6e3512d5f6dcaa3806d2ba9a8c9652857ef9fa6b89cf3c60083e9d620e09853c69b15e6cfb45b1e9497b544d349216dbf5242cd5499ca1964e218a26d09539db6d4071f95e7d93"}, {0xa8, 0x0, 0x5f0, "5be25d09f366dad77bfd32fac02cfbf83dd2aabac1f48fe07ce8d2fbf17a32e9e2059fdb267f1a7a501d9d2c6cdfb95b15790d9a5c80728f86ef4cb1603ef2d5c05190a4a75c53a5af42e7e96aac9f5c8eab4c6c1452c5b57dd39c4afb748448a8e2bf29fc69e387d50820787d273e5cfd44f4d89ba64a3c184744a5a78309fb4b7b172adf0e6da07cc11bb0533debb7d57764f8619755"}, {0x38, 0x10f, 0xfffffffffffffffd, "edc48454a0c2d544b99545c2cde1c839fd5a5a4651f2bb66d314afeaebe9f4fef1"}, {0x38, 0x115, 0x20, "9aa6748235fe25b5d2d5c6d63f85d1d6f4ed14eb26b88cf12b0542c6eeadba4df96dfe46d11a9b0f"}, {0x80, 0x88, 0x6, "c40aae821eb495fba0ead9d4353ce150b264bef8c0a4e07d9061bbb41b98ed19c26629a528c251b0e444d37ec0dfbc9093be6a69ac7a210b7d3ae5d690ba8b6436471325d04d2c7de8a3d23880ff490c8c4303fcce899ad21987b014d41752e12844c4becb9474740c93d1"}], 0x1300, 0x20000001}, 0x8001}], 0x5, 0x8844) 15:10:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:55 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) [ 551.463478] f2fs_msg: 30 callbacks suppressed [ 551.463488] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 551.532420] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 551.580669] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 551.620779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 15:10:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) arch_prctl(0x1003, &(0x7f0000000100)="e170a660b92dd111ec9ecc27a99fa3db46dfcad03b153d297319eb0fb1f94145db3f16d58c57fd0ec882f159ea2f1e61514540739200bb59ecfd5cde083e934c9c5fa0b2f7bee1d00175b4ab75e17d328454b1a048f76ac8924c264976edbcbd518cc2ef5efe39dbcc48d9094407ac46d515903203265e9644d5a4328ef50c73a91195451fee1473c77dfd0e91dbfd5d016605e1686d0f9bbbbc04b876dcba8d6f20572ede1ab98f00a287e8627d7798636a2ae0b222b9cdc461f610741444853041746523e3074036f78eb695cb565a5bce960ce2c1a52c97babc0fa65def9871e8ba9d02bb4da6fae65bc97e93") [ 551.659590] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 551.707079] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 551.744360] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(0) root(3) 15:10:56 executing program 1: syz_read_part_table(0x2000000004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c00000069e97250000000000100000000000000ff070000000000002200000000000000de070000000000004e76b15f0eb90e46a14691316350ecae02000000000000008000000080000000080951e0", 0x9c, 0x1c0}]) [ 551.774546] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 15:10:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) sendto$inet6(r0, &(0x7f0000000180)="0401000000c000ddb8460900fff5", 0xe, 0x0, &(0x7f0000000000)={0xa, 0x200808100, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) 15:10:56 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:56 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 15:10:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 15:10:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x36b7, 0x7f}, {0x2, 0x9}], r0}, 0x18, 0x1) 15:10:56 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000000)) [ 552.630513] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:10:57 executing program 1: syz_read_part_table(0x2000000004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c00000069e97250000000000100000000000000ff070000000000002200000000000000de070000000000004e76b15f0eb90e46a14691316350ecae02000000000000008000000080000000080951e0", 0x9c, 0x1c0}]) [ 552.672626] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 15:10:57 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:57 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r1, r0) 15:10:57 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 15:10:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) 15:10:57 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:57 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) fchmod(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) 15:10:57 executing program 1: syz_read_part_table(0x2000000004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c00000069e97250000000000100000000000000ff070000000000002200000000000000de070000000000004e76b15f0eb90e46a14691316350ecae02000000000000008000000080000000080951e0", 0x9c, 0x1c0}]) 15:10:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) clock_gettime(0x0, &(0x7f0000000180)={0x0}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={r1}, &(0x7f0000000240), 0x8) syz_open_pts(r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 15:10:57 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x231, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 15:10:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001003, &(0x7f0000000bc0)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYPTR, @ANYRESOCT, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES64], @ANYRES32, @ANYPTR64, @ANYPTR64, @ANYRES64, @ANYRESDEC, @ANYRESHEX], @ANYRESDEC, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES32=0x0], @ANYBLOB="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", @ANYRESOCT]) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)="3a9570171c5c31c0ff8531f4fc58822d134f1d398c73c33e3930eb9370", 0x1d, 0xb9d6}, {&(0x7f0000000280), 0x0, 0xc7dd062}], 0x4000, &(0x7f0000000300)={[{@user_xattr='user_xattr'}, {@acl='acl'}, {@dioread_lock='dioread_lock'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) setxattr$security_smack_transmute(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x2) lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0xc, "99797c244ee1327c7d749c5199cac0140ab1"}, 0x14, 0x0) 15:10:58 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, &(0x7f0000000140)={[{@heap='heap'}]}) 15:10:58 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, [0x0, 0xfffffffffffffffc]}) 15:10:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x100, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="8a3a384c176ad892550624bb6f21ec713dbd19cc1820c68bb8af0440a74ea0cc12211b67974b69b0e89a9ac282e13d50b2bc6073badad06324866cd8fd7bf9f68f3834587d839c4cb8d23581ea4546e6dde27a9d234cdd695060e3ad9d90e022c9e29f80781501e89088907b7de1d98301e96caa014f28e3842f4ef2af66c33d8e202598df730b7d300c337d4d7cfed021812f2e6b451e92f0190a003a24e5d1ac1a8c2b24c176416ee5fbb3705619067eb4e6b403ae5ef1b01b70183e23bc2e059f4ed6b849acf83a740e63d989f2f3be826fd061930445ace1004d43829df015995bfce3841a62744ba4", 0xeb, 0x5}, {&(0x7f0000000280)="d5d82d17e3f0a5ce8c5fa667e7b09424bd879c8a4c71e2e78f58db25e45f958685971020bc157ca86b1b3a1b8747178ebdf9ca0b912260c1a6f501fd4fa207c9fb6fb9b3c716bb5d8bb3f0363d9e672f6863af9e74857757a4fb6c99bb3624a9ada9607da8892888a7f4f157a232c5861dafc79feb63caeb6f2ba2fd898a15777dbfeb08df325f72424e1d3b78461331c270c5", 0x93, 0x92}, {&(0x7f0000000340)="c843a3a66354551f797db4b754298a86b7961eece82625fc96cef704604ccf4fd017bf53c5f2a6714b09f2190b6ce75ef516a6e36912cc1eb45a4537c72826647caf6b66af751ff2485b0e1d9f87ef16acb26500e7a5aa6a9a86793587ea214ec18cd52778b747d718c92766e3537def", 0x70, 0x28bd5ab2}, {&(0x7f00000003c0)="ffe9c19c932400118618353506a802b2806a33bb95a60293635896196e4d8870", 0x20, 0xbb61}], 0x1000000, &(0x7f0000000480)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noquota='noquota'}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nodiscard='nodiscard'}, {@auto_da_alloc='auto_da_alloc'}], [{@permit_directio='permit_directio'}, {@subj_user={'subj_user', 0x3d, '$bdev'}}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) futimesat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={{}, {0x77359400}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) truncate(&(0x7f0000000700)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000b80)="0000000080", &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1000020, &(0x7f0000000040)=ANY=[@ANYBLOB='commit=0']) setxattr$security_smack_transmute(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2) utimes(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{0x77359400}, {0x0, 0x2710}}) [ 554.393706] kauditd_printk_skb: 342 callbacks suppressed [ 554.393715] audit: type=1400 audit(1538147458.674:28853): avc: denied { map } for pid=24926 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:58 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c00000069e97250000000000100000000000000ff070000000000002200000000000000de070000000000004e76b15f0eb90e46a14691316350ecae02000000000000008000000080000000080951e0", 0x9c, 0x1c0}]) 15:10:58 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) [ 554.559628] audit: type=1400 audit(1538147458.704:28854): avc: denied { map } for pid=24926 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:58 executing program 3: syz_emit_ethernet(0x24, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x7, 0x4}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) [ 554.704519] audit: type=1400 audit(1538147458.744:28855): avc: denied { map } for pid=24926 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:59 executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') setresuid(0x0, 0xee00, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '@!md5sumselfproc\x00'}, &(0x7f0000000200)=""/4096, 0x1000) 15:10:59 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 554.818997] audit: type=1400 audit(1538147458.754:28856): avc: denied { map } for pid=24926 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 554.984652] audit: type=1400 audit(1538147458.764:28857): avc: denied { map } for pid=24926 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 555.128844] attempt to access beyond end of device 15:10:59 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) [ 555.128854] loop0: rw=12288, want=8200, limit=20 15:10:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) [ 555.128897] attempt to access beyond end of device [ 555.128905] loop0: rw=12288, want=12296, limit=20 [ 555.129220] attempt to access beyond end of device 15:10:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x10000000000001, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) syz_open_pts(r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) [ 555.129228] loop0: rw=12288, want=8200, limit=20 [ 555.129265] attempt to access beyond end of device [ 555.129273] loop0: rw=12288, want=12296, limit=20 [ 555.387243] audit: type=1400 audit(1538147458.794:28858): avc: denied { map } for pid=24926 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:10:59 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 15:10:59 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:10:59 executing program 2: mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) clone(0x48009fff, &(0x7f0000001f37), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000003c0)) [ 555.512361] audit: audit_backlog=65 > audit_backlog_limit=64 [ 555.512368] audit: audit_lost=1207 audit_rate_limit=0 audit_backlog_limit=64 [ 555.512372] audit: backlog limit exceeded [ 555.513590] audit: audit_backlog=65 > audit_backlog_limit=64 [ 555.845939] attempt to access beyond end of device [ 555.864955] loop0: rw=12288, want=8200, limit=20 [ 555.884824] attempt to access beyond end of device [ 555.914170] loop0: rw=12288, want=12296, limit=20 [ 555.937852] attempt to access beyond end of device [ 555.962114] loop0: rw=12288, want=8200, limit=20 [ 555.984453] attempt to access beyond end of device [ 556.007519] loop0: rw=12288, want=12296, limit=20 15:11:00 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) 15:11:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$BPF_PROG_DETACH(0x14, &(0x7f0000000180), 0x14) 15:11:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) 15:11:00 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:00 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 15:11:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000080)="1c68cf9c486f600b9c6c4d4f1457055b", 0x10) [ 556.649277] f2fs_msg: 42 callbacks suppressed [ 556.649286] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:11:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000180), 0x4924924924925a6, 0x0) connect$unix(r2, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) [ 556.757910] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 556.805385] attempt to access beyond end of device 15:11:01 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 556.836112] loop0: rw=12288, want=8200, limit=20 [ 556.876401] attempt to access beyond end of device [ 556.913445] loop0: rw=12288, want=12296, limit=20 15:11:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0x1f7, 0x9}]) [ 556.935075] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 556.974317] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 557.006210] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 557.055661] attempt to access beyond end of device [ 557.098646] loop0: rw=12288, want=8200, limit=20 15:11:01 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") [ 557.160225] attempt to access beyond end of device [ 557.196678] loop0: rw=12288, want=12296, limit=20 [ 557.226612] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 15:11:01 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 15:11:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffff13b54c007110009f30501000b00024000000000020000", 0x1f) 15:11:01 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x10f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 15:11:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x5, 0x10005, 0x80000000001, 0x0, 0x1}, 0x2c) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1) 15:11:02 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:02 executing program 0: socket(0x1d, 0x0, 0x2) [ 558.034627] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 558.139240] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 15:11:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x803ff, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)=""/230) 15:11:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x400) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)=""/229) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 15:11:02 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x4000000000001e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000700), 0x5f2) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) mkdir(&(0x7f0000000000)="2e2466696c6530f600", 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000000140)="2e2466696c6530f600", &(0x7f0000000180)='ceph\x00', 0x0, &(0x7f00000001c0)) close(r1) 15:11:03 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x10, 0xffffffff, 0xffee) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x3) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000000)=0x6) 15:11:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="ab5283b51359cc13575e984509983603", 0x10}], 0x1, &(0x7f0000000100)}, 0x0) 15:11:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x78, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f000036c000)="7b637075736574272173797374656da147504c283a2800") 15:11:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) [ 559.460967] kauditd_printk_skb: 372 callbacks suppressed [ 559.460975] audit: type=1400 audit(1538147463.744:29178): avc: denied { map } for pid=25055 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:03 executing program 3: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$seccomp(0x16, 0x1, &(0x7f00000001c0)={0x1ffffffffffffe67, &(0x7f0000000200)}) 15:11:03 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r0 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r0, 0x0) dup2(r0, 0xffffffffffffffff) 15:11:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000000000000007000000100000000000000000000000070000d6"], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 559.500159] FAT-fs (loop2): codepage cp437 not found [ 559.625319] FAT-fs (loop2): Unrecognized mount option "ÿ" or missing value [ 559.805343] audit: type=1400 audit(1538147463.784:29179): avc: denied { map } for pid=25055 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) listen(r0, 0x0) [ 559.967660] audit: type=1400 audit(1538147463.784:29180): avc: denied { map } for pid=25056 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x2c, 0x2, [@tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TOS={0x8}]]}}}]}, 0x5c}}, 0x0) 15:11:04 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000004c0)="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", 0xfc) [ 560.174564] audit: type=1400 audit(1538147463.794:29181): avc: denied { map } for pid=25058 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:04 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x60}}) 15:11:04 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 560.256623] audit: audit_backlog=65 > audit_backlog_limit=64 [ 560.256628] audit: audit_lost=1226 audit_rate_limit=0 audit_backlog_limit=64 [ 560.256630] audit: backlog limit exceeded [ 560.261997] audit: audit_backlog=65 > audit_backlog_limit=64 [ 560.262003] audit: audit_lost=1227 audit_rate_limit=0 audit_backlog_limit=64 15:11:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xf) [ 560.262007] audit: backlog limit exceeded [ 560.519609] netlink: 224 bytes leftover after parsing attributes in process `syz-executor1'. 15:11:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 15:11:05 executing program 2: r0 = socket(0xa, 0x1, 0x0) unshare(0x40000200) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) 15:11:05 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00004c5000)={0x1, 0x0, [0x0]}) 15:11:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800008800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) 15:11:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:11:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@empty, 0x1}, 0x20) 15:11:05 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) setreuid(0x0, 0x0) 15:11:05 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 15:11:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'3! ', './file0'}, 0xfdef) 15:11:06 executing program 0: r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040), 0x0) 15:11:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r3 = dup2(r1, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x20) 15:11:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x11, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 15:11:06 executing program 5: mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file1\x00', 0x2) open(&(0x7f0000000300)='./file1/file0\x00', 0x0, 0x81) set_robust_list(&(0x7f00000002c0)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x8, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x89) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x0, @rand_addr, 0x4e20, 0x1, 'fo\x00', 0x20, 0x7}, 0x2c) setns(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 15:11:07 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000005480), &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) chdir(&(0x7f0000000080)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:11:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x9, 0x4) 15:11:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x0) 15:11:07 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000100c0), 0x0, 0x2022, &(0x7f0000010380)) 15:11:07 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) r0 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 15:11:07 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) unshare(0x20020000) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 15:11:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xff) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x1, 0x0, 0x0) 15:11:07 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) getpid() sched_setparam(0x0, &(0x7f0000000000)=0x4b5) 15:11:08 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 564.037841] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 15:11:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x10000e0, 0xffffff7f00000000, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 15:11:08 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 564.481617] kauditd_printk_skb: 419 callbacks suppressed [ 564.481626] audit: type=1400 audit(1538147468.764:29529): avc: denied { map } for pid=25204 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:08 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x6, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x0, &(0x7f0000000100)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000280)='./file0/file0\x00', r0}, 0x10) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x10438, &(0x7f0000000200)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) [ 564.687789] audit: type=1400 audit(1538147468.784:29530): avc: denied { map } for pid=25204 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000001180)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 15:11:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) getpid() sched_setparam(0x0, &(0x7f0000000000)=0x4b5) [ 564.848276] audit: type=1400 audit(1538147468.784:29531): avc: denied { map } for pid=25204 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b0bff8)='./file0\x00', 0x0) mount(&(0x7f0000707000), &(0x7f0000265ff8)='./file0\x00', &(0x7f0000233000)='sysfs\x00', 0x0, &(0x7f00005b8f60)) mount(&(0x7f0000926000), &(0x7f0000c28ff8)='./file0\x00', &(0x7f00008f4000)='aufs\x00', 0x2825, &(0x7f0000136000)) 15:11:09 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 565.082343] audit: type=1400 audit(1538147468.814:29532): avc: denied { map } for pid=25206 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:09 executing program 0: r0 = memfd_create(&(0x7f0000000200)='ramfs\x00', 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="40f3fd7a6c5e96", 0x7}], 0x1, 0x0) ftruncate(r0, 0x7) [ 565.272387] audit: type=1400 audit(1538147468.814:29533): avc: denied { map } for pid=25206 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:09 executing program 2: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10000) [ 565.307006] audit: audit_backlog=65 > audit_backlog_limit=64 [ 565.307015] audit: audit_lost=1252 audit_rate_limit=0 audit_backlog_limit=64 [ 565.307019] audit: backlog limit exceeded 15:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x3, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 565.347394] audit: audit_backlog=65 > audit_backlog_limit=64 [ 565.347401] audit: audit_lost=1253 audit_rate_limit=0 audit_backlog_limit=64 15:11:10 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:10 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 15:11:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x56aa, 0x11, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 15:11:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000100)=0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x14) 15:11:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)) r1 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x94, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x70, 0x10, &(0x7f0000000200)=[@ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x1, 0x4, 0x17}, @fda={0x66646185, 0x7, 0x0, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1, 0x3, 0xa}], &(0x7f0000000280)=[0x0, 0x0]}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300), &(0x7f0000000340)=[0x0]}}], 0xf8, 0x0, &(0x7f0000000440)="558d4c97b3cc4b9be4484f684b623c9a3e6cd8a9c40493b4632aca0f829d0a873799604b704bd1d273e6dcf43023045613aa9080bfb48ea27bdcf9d6d564f8c0e8ad270e13e397a765bf39a8b3775384dc63969ccf6b9a9d6115c100ea6729496831c350c6b9914fb6dc9be70508a70da135b531bf73e71bf5e8a10c530519d818bb8d5789765102377e630c5a52461d58e7ffb16f1ec650c521907014612145016ec0e431caaee4b7b063234cf5794823c94077ad54e89b86422ad4ac9ce52e566a04a6bc6388901094cc2fb5993c448b2dfcde39032b154a89a8df17288cda60ab499db39aa01c854e01a531be8b93908bb8437f7b0720"}) 15:11:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='security.capability\x00', &(0x7f0000000280)=""/189, 0x4d9) [ 566.411708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 15:11:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote}, 0x25c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x4) [ 566.460708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 566.534506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 566.583494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 15:11:10 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:10 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000000000), 0x4) 15:11:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x84) sendto$inet6(r0, &(0x7f0000000080), 0xfc08, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:11:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='security.capability\x00', &(0x7f0000000280)=""/189, 0x4d9) [ 566.962229] binder: 25267:25271 ioctl 400c6615 20000300 returned -22 15:11:11 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x8003, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000140)) [ 567.038421] binder: 25267:25271 BC_FREE_BUFFER u0000000000000000 no match [ 567.127897] binder: 25267:25271 got transaction to context manager from process owning it [ 567.177441] binder: 25267:25271 transaction failed 29201/-22, size 112-16 line 3003 [ 567.238659] binder: BINDER_SET_CONTEXT_MGR already set [ 567.246118] binder: 25267:25271 ioctl 400c6615 20000300 returned -22 [ 567.297185] binder: 25267:25276 ioctl 40046207 0 returned -16 15:11:11 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70}, 0x0, 0xffffffffffffffff, r1, 0x0) 15:11:11 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) poll(&(0x7f0000000380)=[{r0}, {r0}, {}], 0x3, 0x8) 15:11:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000162fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000822f12)=""/238) [ 567.662431] F2FS-fs (loop0): Fix alignment : done, start(5120) end(19456) block(13312) [ 567.715753] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 567.773651] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 567.811837] attempt to access beyond end of device [ 567.863468] loop0: rw=12288, want=8200, limit=64 [ 567.891592] attempt to access beyond end of device 15:11:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) [ 567.921399] loop0: rw=12288, want=12296, limit=64 [ 567.947185] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 567.981470] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:11:12 executing program 4: clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000000140), &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, &(0x7f0000002300), &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001e80)) pread64(r0, &(0x7f0000000040)=""/12, 0x39, 0x200000000000000) 15:11:12 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:12 executing program 1: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_aout(r0, &(0x7f0000000080)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15e}}, 0x20) close(r0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)) [ 568.050376] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 568.108371] attempt to access beyond end of device [ 568.136880] loop0: rw=12288, want=8200, limit=64 [ 568.164525] attempt to access beyond end of device 15:11:12 executing program 2: futex(&(0x7f0000004000), 0xc, 0x0, &(0x7f0000000040), &(0x7f0000004000), 0x0) [ 568.194236] loop0: rw=12288, want=12296, limit=64 [ 568.234398] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 568.361160] F2FS-fs (loop0): Fix alignment : done, start(5120) end(19456) block(13312) [ 568.421361] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 568.472786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 568.529452] attempt to access beyond end of device [ 568.571092] loop0: rw=12288, want=8200, limit=64 [ 568.608567] attempt to access beyond end of device 15:11:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) [ 568.658280] loop0: rw=12288, want=12296, limit=64 15:11:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x1a, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'security.capability\x00'}, &(0x7f0000000200)="0000000201000000000000010400", 0xe, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 568.701818] attempt to access beyond end of device [ 568.734012] loop0: rw=12288, want=8200, limit=64 [ 568.753712] attempt to access beyond end of device [ 568.790091] loop0: rw=12288, want=12296, limit=64 15:11:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000301ffff808f00003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x1ad, 0x200002, &(0x7f0000000c40)={0x77359400}) 15:11:13 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0xfffffffffffffffe) 15:11:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) r1 = inotify_init() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200000000e) sendfile(r0, r0, &(0x7f0000000080), 0x2000000800004c36) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 15:11:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x60}}) [ 569.508457] kauditd_printk_skb: 455 callbacks suppressed [ 569.508465] audit: type=1400 audit(1538147473.764:29878): avc: denied { read } for pid=25342 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 15:11:13 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000045000)='./file0\x00', 0x0) mount(&(0x7f000038bff8), &(0x7f0000d04ff8)='./file0\x00', &(0x7f0000f57000)='sockfs\x00', 0x0, &(0x7f0000a07000)="4d293b4246d862c2e24f7aabb231be06371d3667c11bb6d0ba9870894082e9aa4ec975f4c7b1c854727f26d3205aaa09b125812c66cf3a4c542ca956bc61c9d45b5ef348bcbcae218166b7fb673cabf877e4c24e708d6b3e0878123414ee397e7a62ed8dc66f1b82f6d1cee2672760a6befb1995f396ef788358abb3ee02b0edd17379d151d8fb96e122812855a97d49cc74bcb9a2dda075681e7114cb69d8ae0b1bc2eb30553cc731c820ff6621071535adcf27b2441fbff95b35a2c958aa3ad5394a4ffab0d6fe9c5ccdc27eb7c39874acff2b0570d247e1a8b04dc36ed0be44a7517385d1567eafa8832c") [ 569.698750] audit: type=1400 audit(1538147473.824:29881): avc: denied { map } for pid=25349 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:14 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000219ff0)={0x77359400}, &(0x7f00000003c0), 0x0) 15:11:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000301ffff808f00003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x1ad, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 569.849748] audit: type=1400 audit(1538147473.834:29882): avc: denied { map } for pid=25349 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000adb000)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524cf9ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c906a38cbda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be7700d66f2d2c3a63dba8eb35e7127246029e222f0b2aebbe767f5125e2d9ea5d5987b9bb96f303e4f3c647c776c5b6306472896dcebe0de6d001b453a4e26dfe433b409586e0faca3ee89e8b936ea46b97a0f663544a8f4784c6b484334949f583b02557645c7d7884910eaf4879da3f4f37ce789b728a49d0546730e2adb0a9cb74620b0cf3a28061a607089a47a23e831c16dd002fc6ad4ebd7c62d265da40d6bfd145698d18d14522e19aa599cd9e412c4644dccb31849bd5e31411c6ff9249be50762cc6fdaa01a7cdcb162dc0516524002b688a462f69b6cce348a6dc5e9356ae3938909ea062f9501220214e83a4e621b8d685925c92c7564e9132cfe10f8acb646b731114ff101479f99d70a4bd6033bf5e4e6675120fa21d0610a685af21ba76162fa5cc571056b295b8f9987fdef14526be89516234dee2d93bf7ceba533af07bb7a6e9f1d5756f81a7558b5e029e662c5dfe00f657bd5a5165c6d44bd90f719342b7ac36eb8f10cdaeda44c079ecb31d324125ac848a27ba173ad35d1acd4e206387ecea474d6a70086d225448e247bfcd51ecae1f15dfe10acc50e7757cca9c5ef80562b63224c3259d6d1fc928264d356b8345ba03e10cd6970c0343ee98359dcb5920b83cb0aa034807f40050c6cf63543e107d85bfa82ce4f5e90f6078a743b0c7ccdd007c7c0115abfd5a9a52873b7b5da78a1ab7404016c5d00aabcfc3e16070b8222a99efebebf6042e6da1dbb3e782d831c0eb4f464b82abc0a8", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x707000) [ 570.012671] audit: type=1400 audit(1538147473.844:29883): avc: denied { map } for pid=25349 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:14 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000180), 0x4) [ 570.204262] audit: type=1400 audit(1538147473.844:29884): avc: denied { map } for pid=25349 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c08000000000000000800617d386db9dd453d1867cb2e45ceb652a9578f5ddf140c3cf846ba726dd1861fc50fa88c4ed64aadd115ff09fd7171d96f22a19ab50a77020000000000000040"], 0x4b) 15:11:14 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 570.404503] audit: type=1400 audit(1538147473.864:29885): avc: denied { map } for pid=25349 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 570.504029] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:15 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x218, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f00000000c0), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x80000000, 0x0, 'gretap0\x00', 'eql\x00', 'dummy0\x00', '\x00', @dev, [], @link_local, [], 0xf8, 0x158, 0x188, [@devgroup={'devgroup\x00', 0x18}, @limit={'limit\x00', 0x20}]}, [@common=@STANDARD={'\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x290) [ 570.504036] audit: audit_lost=1290 audit_rate_limit=0 audit_backlog_limit=64 [ 570.504039] audit: backlog limit exceeded [ 570.508484] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000301ffff808f00003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x1ad, 0x200002, &(0x7f0000000c40)={0x77359400}) 15:11:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) 15:11:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000040)="2d856f9856f26b60ed3fd2b0518c7105bdb93c825b92b6de62d220084501c1a125a5f2a58918c00d0630875fa3009dad4e39f3c2867613d5c09254aac49bb51a972775a5a5720de7d11dcde81dee8e37dbb18cd1fc398bc24a4493201dbf97eca3998b9dbd1552a677a3e9f0777c057bd5f336b55456d0c55f030c3097cd6583183b2d6fb99f60193eb7b885209187d1667b2745333f6c10") 15:11:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/84) 15:11:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x42, &(0x7f0000000080), 0x0) 15:11:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:15 executing program 0: readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/122, 0x7a}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000080)=[0x6]) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') preadv(r0, &(0x7f0000000480), 0x100000000000013e, 0x0) 15:11:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0x9406000000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 15:11:16 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x7fffffff, 0x2000000208972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) clone(0x0, &(0x7f0000000000), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) mlock(&(0x7f0000c90000/0x3000)=nil, 0x3000) 15:11:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 15:11:16 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000040)="2d856f9856f26b60ed3fd2b0518c7105bdb93c825b92b6de62d220084501c1a125a5f2a58918c00d0630875fa3009dad4e39f3c2867613d5c09254aac49bb51a972775a5a5720de7d11dcde81dee8e37dbb18cd1fc398bc24a4493201dbf97eca3998b9dbd1552a677a3e9f0777c057bd5f336b55456d0c55f030c3097cd6583183b2d6fb99f60193eb7b885209187d1667b2745333f6c10") 15:11:16 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="020055355ac5950e54aeff070000000000000000000000000200ffffffffffffffff000000000056", 0x28, 0x1c0}]) 15:11:17 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) setresuid(0x0, 0x0, 0x0) 15:11:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) 15:11:17 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 15:11:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 15:11:17 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:17 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r0, r1, &(0x7f0000000000)=0xffffffd, 0x6) 15:11:17 executing program 0: mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000002, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000280), &(0x7f0000000040)=0x4) 15:11:17 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 15:11:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 15:11:18 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:18 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000000c0)=[{0x4d}, {0x6}]}, 0x10) 15:11:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @loopback}}) 15:11:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) read(r1, &(0x7f00000003c0)=""/252, 0xfc) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 15:11:18 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 15:11:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}, 0x45c) 15:11:18 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 574.523335] kauditd_printk_skb: 394 callbacks suppressed [ 574.523343] audit: type=1400 audit(1538147478.804:30245): avc: denied { map } for pid=25487 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 574.645950] input: syz1 as /devices/virtual/input/input12 [ 574.716521] audit: type=1400 audit(1538147478.804:30246): avc: denied { map } for pid=25487 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:19 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 574.895332] audit: type=1400 audit(1538147478.834:30247): avc: denied { map } for pid=25487 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:19 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 575.016856] input: syz1 as /devices/virtual/input/input13 [ 575.056343] input: syz1 as /devices/virtual/input/input14 [ 575.177032] audit: type=1400 audit(1538147478.854:30248): avc: denied { map } for pid=25487 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}, 0x45c) 15:11:19 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240), 0x0, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 575.393275] audit: type=1400 audit(1538147478.874:30249): avc: denied { map } for pid=25487 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 575.426749] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:19 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 575.426756] audit: audit_lost=1303 audit_rate_limit=0 audit_backlog_limit=64 [ 575.426760] audit: backlog limit exceeded [ 575.437124] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.437131] audit: audit_lost=1304 audit_rate_limit=0 audit_backlog_limit=64 15:11:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b70000000aed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000007b0a00fe00000000850000002f000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) [ 575.445052] input: syz1 as /devices/virtual/input/input15 15:11:20 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 576.111520] input: syz1 as /devices/virtual/input/input16 15:11:20 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000001021f001cfffd946fa283005b580a000900020009000000010015000404ff7e", 0x24}], 0x1}, 0x0) 15:11:20 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000000)={@mcast1={0xff, 0x1, [0x4]}}, 0x20) 15:11:20 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240), 0x0, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:20 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:21 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 576.996050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 577.043843] netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. 15:11:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = memfd_create(&(0x7f0000000040)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x2) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r2, &(0x7f0000000340), 0x200000000ffff) fcntl$addseals(r2, 0x409, 0x8) shutdown(r0, 0x1) 15:11:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TCFLSH(r0, 0x80047437, 0x709000) 15:11:21 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240), 0x0, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b70000000aed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000007b0a00fe00000000850000002f000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) 15:11:21 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) 15:11:22 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:22 executing program 0: timer_create(0x7, &(0x7f0000044000)={0x0, 0x1000000000000017, 0x0, @thr={&(0x7f0000000280), &(0x7f00000002c0)}}, &(0x7f00008ec000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+30000000}, {0x77359400}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) 15:11:22 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) 15:11:22 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:22 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a000ec00000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:11:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0x200000000010, 0x2, 0x0) dup2(r2, r0) 15:11:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = getpgid(0x0) prlimit64(r2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) 15:11:22 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:22 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) 15:11:23 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x8043, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 15:11:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 15:11:23 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) 15:11:23 executing program 0: mknod(&(0x7f0000f80000)='./file0\x00', 0xffd, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000300), &(0x7f00006fcff0)) 15:11:23 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:23 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 15:11:23 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000000740)='./file0\x00', &(0x7f0000000600)="636f6e66696766730037e82ddddb56c8e8af684688da299c03164426a200762309d96fef70f6acf8866ec52bff633d9df165466b6899031f2b3e0172c91ab170b214b63734e2f0db06f62d1822dd4d1d1cd58fa4a864aebc84e223c3c3c2ec002efdb1c53e7d13fa48faf3fa4a0da5d61674ef32466b", 0x0, &(0x7f0000000680)) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 15:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 15:11:23 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:23 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, r0) [ 579.551826] kauditd_printk_skb: 528 callbacks suppressed [ 579.551834] audit: type=1400 audit(1538147483.834:30579): avc: denied { map } for pid=25624 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:23 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 15:11:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/176, &(0x7f00000000c0)=0xb0) [ 579.679168] audit: type=1400 audit(1538147483.874:30580): avc: denied { map } for pid=25624 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 579.851910] audit: type=1400 audit(1538147483.884:30581): avc: denied { map } for pid=25624 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:24 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x94}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000001c7, 0x0) 15:11:24 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 580.050099] audit: type=1400 audit(1538147483.904:30582): avc: denied { map } for pid=25624 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 580.267719] audit: type=1400 audit(1538147483.914:30583): avc: denied { map } for pid=25624 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:24 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(0xffffffffffffffff, 0x0) dup2(r1, r0) [ 580.438419] audit: type=1400 audit(1538147483.924:30584): avc: denied { map } for pid=25624 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:24 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) 15:11:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:24 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8000000000283224ea4224b5494fab2", 0x25}], 0x0, &(0x7f00000000c0)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 580.584169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 580.584176] audit: audit_lost=1371 audit_rate_limit=0 audit_backlog_limit=64 [ 580.584180] audit: backlog limit exceeded [ 580.605306] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0xe8) connect(r0, &(0x7f00004f5000)=@ethernet={0x0, @link_local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 15:11:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:11:25 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(0xffffffffffffffff, 0x0) dup2(r1, r0) 15:11:25 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) [ 581.269078] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:11:25 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:25 executing program 0: fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000300)='{', 0x1}], 0x1) sendfile(r1, r1, &(0x7f0000000080), 0x2000000800004c36) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) write$P9_RUNLINKAT(r2, &(0x7f0000000200)={0x7}, 0x7) [ 581.760386] FAT-fs (loop1): codepage cp437 not found 15:11:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x6, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) 15:11:26 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(0xffffffffffffffff, 0x0) dup2(r1, r0) 15:11:26 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) [ 581.879461] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 581.972511] FAT-fs (loop1): codepage cp437 not found 15:11:26 executing program 1: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) clock_nanosleep(0x2, 0x0, &(0x7f0000000200), 0x0) 15:11:26 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2711, 0xffffffffffffffff, &(0x7f0000000040)) 15:11:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @random="df8c425a2861", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 15:11:26 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) 15:11:26 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(0xffffffffffffffff, r0) 15:11:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 15:11:27 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) read(r0, &(0x7f0000000140)=""/169, 0xa9) 15:11:27 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_create(0x2) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f0000000100)={0x10, 0x5}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@rand_addr}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 15:11:27 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=""/174) [ 583.180873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.206535] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.254819] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.295657] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:11:27 executing program 1: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) [ 583.348178] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:11:27 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_create(0x2) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 583.410186] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.462778] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.501586] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.540111] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.579832] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 583.625485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 15:11:27 executing program 4: r0 = socket(0x11, 0x80a, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 583.669622] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 583.679575] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 15:11:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x6}) [ 583.733612] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 583.764861] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 583.817775] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 583.860972] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 15:11:28 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) fchmod(r1, 0x0) dup2(r1, 0xffffffffffffffff) [ 583.903366] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 583.949524] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 583.991861] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 15:11:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) keyctl$get_persistent(0x16, 0x0, r0) [ 584.039064] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 584.110795] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 15:11:28 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_create(0x2) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 584.163351] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 584.213749] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 15:11:28 executing program 3: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24000) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) 15:11:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000200), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x1}, 0x14}}, 0x0) 15:11:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) close(r1) [ 584.564259] kauditd_printk_skb: 414 callbacks suppressed [ 584.564267] audit: type=1400 audit(1538147488.844:30946): avc: denied { map } for pid=25771 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:28 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc564, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000eaf000)='./file0\x00', 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000237ffa)) [ 584.776548] audit: type=1400 audit(1538147488.914:30947): avc: denied { map } for pid=25771 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:29 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/197, 0xc5}], 0x1) 15:11:29 executing program 1: bpf$BPF_PROG_DETACH(0x12, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700}, 0x14) [ 584.984255] audit: type=1400 audit(1538147488.914:30948): avc: denied { map } for pid=25771 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 585.192302] audit: type=1400 audit(1538147488.954:30949): avc: denied { map } for pid=25771 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001640)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) 15:11:29 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x765626762301cc6d) [ 585.368663] audit: type=1400 audit(1538147488.964:30950): avc: denied { map } for pid=25771 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x1}) read(r0, &(0x7f0000000000), 0x0) 15:11:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)) 15:11:29 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000b75fd4)={0x2000000000000e, 0x4, 0x4, 0x40003}, 0x2c) 15:11:29 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 585.419311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 585.419317] audit: audit_lost=1390 audit_rate_limit=0 audit_backlog_limit=64 [ 585.419321] audit: backlog limit exceeded [ 585.421896] audit: audit_backlog=65 > audit_backlog_limit=64 [ 585.421904] audit: audit_lost=1391 audit_rate_limit=0 audit_backlog_limit=64 15:11:30 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) read(r3, &(0x7f0000000280)=""/1, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) [ 586.038767] FAT-fs (loop1): bogus number of reserved sectors [ 586.079923] FAT-fs (loop1): Can't find a valid FAT filesystem 15:11:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local, @remote}, 0xc) syz_emit_ethernet(0x5c, &(0x7f0000359fd5)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 15:11:30 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = timerfd_create(0x7, 0x0) r2 = dup(r1) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000300)) 15:11:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 15:11:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = memfd_create(&(0x7f0000000000)="23656d31232b0085d8b102000000000000006a437432a2aa18be887be98a8f259e2d99c9785c3e5533f6b68bba843fc4", 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8801}) 15:11:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000080)=0xfffffffffffffe4c) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:11:31 executing program 4: r0 = memfd_create(&(0x7f0000000140)="0d47fb", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000e50003000300000000000000000038000000000000000000000000082000f9"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 15:11:31 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000), 0xc, &(0x7f0000000040)={&(0x7f0000d3dc98)={0x1c, 0x217, 0x10000000000a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x2, @pid}]}, 0x1c}}, 0x0) 15:11:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 15:11:31 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 15:11:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000af1ffc)=0x404100fffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000e66000), 0x4) 15:11:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x0, 0x70fe0000000000, 0xf000) 15:11:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) close(r0) 15:11:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x8, 0x4, 0x80000000004, 0x8000000007, 0xc}, 0x2c) 15:11:32 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 15:11:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) 15:11:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) 15:11:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b70000000aed0050bfa30000000000000703000040feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000003f460000000000006b0a00fe00000000850000002f000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) 15:11:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000000c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:11:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff95, 0x0, 0x0, 0x0, 0x0, 0x15}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 15:11:33 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x260, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8100, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xd0, 0x100, 0x130, [@vlan={'vlan\x00', 0x8, {{0x1, 0x0, 0x892f, 0x7}}}, @connlabel={'connlabel\x00', 0x8}]}, [@common=@STANDARD={'\x00', 0x8}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2d8) 15:11:33 executing program 0: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x101, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xd5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000240)) 15:11:33 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x541b, &(0x7f0000000000)) 15:11:33 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) dup2(r0, r2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) tkill(r1, 0x1000000000016) 15:11:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 589.579831] kauditd_printk_skb: 496 callbacks suppressed [ 589.579838] audit: type=1400 audit(1538147493.854:31386): avc: denied { map } for pid=25932 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"98655f683046fd0400d6ae00", 0x1}) ioctl$TUNDETACHFILTER(r1, 0x800454d2, 0x0) [ 589.728860] audit: type=1400 audit(1538147493.864:31387): avc: denied { map } for pid=25933 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:34 executing program 3: getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]) setregid(r0, 0x0) [ 589.895975] audit: type=1400 audit(1538147493.874:31388): avc: denied { map } for pid=25933 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 590.101826] audit: type=1400 audit(1538147493.894:31389): avc: denied { map } for pid=25932 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:34 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) [ 590.259517] audit: type=1400 audit(1538147493.914:31390): avc: denied { map } for pid=25932 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:34 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 15:11:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"98655f683046fd0400d6ae00", 0x1}) ioctl$TUNDETACHFILTER(r1, 0x800454d2, 0x0) [ 590.421016] audit: type=1400 audit(1538147493.924:31391): avc: denied { map } for pid=25932 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:34 executing program 0: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x101, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xd5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000240)) [ 590.595636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 590.595643] audit: audit_lost=1412 audit_rate_limit=0 audit_backlog_limit=64 [ 590.595647] audit: backlog limit exceeded [ 590.599871] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:35 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 590.946416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket pig=25973 comm=syz-executor3 15:11:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x7c) [ 591.116422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket pig=25978 comm=syz-executor3 15:11:35 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x104}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) 15:11:37 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mount(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1f, 0x0) 15:11:37 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) 15:11:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000100)=0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x14) 15:11:37 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') read$eventfd(r1, &(0x7f00000000c0), 0x2c3) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 15:11:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) setns(r0, 0x8020000) execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) open(&(0x7f0000000300)='./file1/file0\x00', 0x121842, 0x81) set_robust_list(&(0x7f00000002c0)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x8, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x89) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 15:11:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x31, &(0x7f0000000180)={0x77359400}, 0x10) 15:11:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000180), &(0x7f00000001c0)=0x2bd) 15:11:37 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:37 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000001040)=ANY=[]) 15:11:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fd4), 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000f8ff0)={&(0x7f00005f5ff8)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00004f9000), 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000a000)={0xffffffffffffffff, &(0x7f0000023f38), &(0x7f0000023ff1)}, 0x20) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000025000)) 15:11:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) keyctl$session_to_parent(0x12) 15:11:37 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000140)=@ethtool_dump={0x31, 0x0, 0x0, 0x19, "b4dbe1e1021179e8245a65423bd4fe73206f29af5ea605a3c4"}}) 15:11:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5cf7cf08637a", 0x66, 0x400}], 0x0, &(0x7f0000000500)) 15:11:38 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f00003c0fdc)={0x14, 0x6, 0x1, 0x800000003}, 0x14}}, 0x0) 15:11:38 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = geteuid() ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) keyctl$get_persistent(0x16, 0x0, 0x0) setresuid(r1, 0x0, r1) 15:11:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000000207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) [ 594.403683] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 594.578542] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 594.583399] kauditd_printk_skb: 446 callbacks suppressed [ 594.583407] audit: type=1400 audit(1538147498.864:31809): avc: denied { map } for pid=26066 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:39 executing program 5: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x92e14e1e53651b8) 15:11:39 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 594.587152] audit: type=1400 audit(1538147498.864:31810): avc: denied { map } for pid=26062 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 594.589407] audit: type=1400 audit(1538147498.864:31811): avc: denied { map } for pid=26069 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:39 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) r0 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r1 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 594.591733] audit: type=1400 audit(1538147498.874:31812): avc: denied { map } for pid=26066 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:39 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:39 executing program 5: 15:11:39 executing program 0: [ 594.597827] audit: type=1400 audit(1538147498.874:31813): avc: denied { map } for pid=26067 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 594.598615] audit: type=1400 audit(1538147498.874:31814): avc: denied { map } for pid=26062 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 594.604696] audit: type=1400 audit(1538147498.884:31815): avc: denied { map } for pid=26067 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 594.614252] audit: type=1400 audit(1538147498.894:31816): avc: denied { create } for pid=26068 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 594.621857] audit: type=1400 audit(1538147498.904:31817): avc: denied { map } for pid=26069 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 594.627779] audit: type=1400 audit(1538147498.904:31818): avc: denied { map } for pid=26067 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5cf7cf08637a", 0x66, 0x400}], 0x0, &(0x7f0000000500)) 15:11:40 executing program 4: 15:11:40 executing program 0: 15:11:40 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) r0 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r1 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:40 executing program 5: 15:11:40 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:40 executing program 4: 15:11:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x305}, 0x14}}, 0x0) 15:11:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) 15:11:40 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:40 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) r0 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r1 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:41 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)={0x0, 0xfffffffffffffffd, [0x0, 0x20000000000004, 0xfffffffffffffffc]}) [ 596.786985] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5cf7cf08637a", 0x66, 0x400}], 0x0, &(0x7f0000000500)) 15:11:41 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:41 executing program 5: r0 = socket$inet(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'sed\x00'}, 0x7) 15:11:41 executing program 2: pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:41 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x1a, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 15:11:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000202ffd)='ns\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000064, 0x0) 15:11:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 597.560443] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:42 executing program 2: pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5cf7cf08637a", 0x66, 0x400}], 0x0, &(0x7f0000000500)) 15:11:42 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f00000000c0)=""/174) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)) close(r0) 15:11:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"0000000000000000000000000200", 0x5002}) write$binfmt_aout(r0, &(0x7f0000000300)={{0x0, 0x100000001}}, 0x20) 15:11:42 executing program 2: pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 598.392426] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 598.446401] PPPIOCDETACH file->f_count=2 15:11:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)) 15:11:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:43 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f00000000c0)=""/174) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)) close(r0) 15:11:43 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="6e65742f69705f6d725f766966007da9f90dbabd9a2f16d9a51101fac8ef9d97c5b9ac419cd2d507443b59b536dea30db28f6dbf5f6088e86586b6ca9fa98c59e877ae5381c78ec45306f6a67f7b2376363731758c34b5171261cbdc06d3c9ca40a0019e18ac47a167ab5a51b1f1c49533da56ba0855ec31a415f8cb8634e0a9d1f4d82c4618584fab2417e1933dfd4ef0914bb8fe2dcadfe30077a4b176ec257069c900e6755752b696cfb3fa3afa6c0641e48e72fcc470d89528f987d9289d98849d75c525a50ca210f4df9efc9d867e093614b4b10d577d4c069485b18a58f6b3e900499b99c3e0492c94c8c71381aa76f8a5b4a12f") sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 15:11:43 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:43 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000000013002d54036205001a000000000000000000000000d707ff638f17ddf61def6390cd00000001f340000000000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400018a, 0x0) [ 599.213656] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:11:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)) [ 599.430229] PPPIOCDETACH file->f_count=3 15:11:43 executing program 5: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000580)="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", 0x200, 0x0) fcntl$setstatus(r0, 0x4, 0x4401) io_setup(0x201, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)) io_submit(r1, 0x33, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 15:11:43 executing program 0: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="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") sendfile(r0, r1, &(0x7f0000000040), 0x100000001) 15:11:43 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:43 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 599.619156] kauditd_printk_skb: 355 callbacks suppressed [ 599.619165] audit: type=1400 audit(1538147503.894:32174): avc: denied { map } for pid=26194 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 599.827116] audit: type=1400 audit(1538147503.914:32175): avc: denied { map } for pid=26194 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x14, 0x3, 0x1, 0x800000001}, 0x14}}, 0x0) 15:11:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)) [ 599.895884] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 600.080131] audit: type=1400 audit(1538147503.934:32176): avc: denied { map } for pid=26200 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:44 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 600.241914] audit: type=1400 audit(1538147503.934:32177): avc: denied { map } for pid=26204 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000500)=[@decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f00000004c0)}}], 0x0, 0x0, &(0x7f00000000c0)}) 15:11:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:11:44 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 600.373636] audit: type=1400 audit(1538147503.944:32178): avc: denied { map } for pid=26204 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4), 0xc, &(0x7f000024dff0)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x800000001, 0x0, 0x0, {}, [@typed={0x14, 0x12, @ipv6=@mcast1}]}, 0x28}}, 0x0) [ 600.474000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.474007] audit: audit_lost=1423 audit_rate_limit=0 audit_backlog_limit=64 15:11:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0), 0x0, 0x400}], 0x0, &(0x7f0000000500)) [ 600.474011] audit: backlog limit exceeded 15:11:45 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x0, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 600.478189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 600.478195] audit: audit_lost=1424 audit_rate_limit=0 audit_backlog_limit=64 [ 600.556911] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 600.825974] binder: 26231:26235 transaction failed 29189/-22, size 0-0 line 3012 [ 600.887960] binder: 26231:26238 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 600.887970] binder: 26231:26238 got reply transaction with no transaction stack 15:11:45 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) dup3(r1, r0, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 600.887979] binder: 26231:26238 transaction failed 29201/-71, size 0-0 line 2920 15:11:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, &(0x7f0000008f37)}) [ 601.085841] binder_alloc: binder_alloc_mmap_handler: 26236 20001000-20004000 already mapped failed -16 15:11:45 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000180)="1f0000000104ff00fd435407000000000000000008000100010423dcffdf00", 0x1f) [ 601.104900] binder_alloc: 26236: binder_alloc_buf, no vma [ 601.104936] binder: 26231:26247 transaction failed 29189/-3, size 0-0 line 3135 15:11:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0), 0x0, 0x400}], 0x0, &(0x7f0000000500)) [ 601.105272] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.105314] binder: undelivered TRANSACTION_ERROR: 29201 [ 601.105326] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.123057] binder: BINDER_SET_CONTEXT_MGR already set [ 601.123066] binder: 26236:26241 ioctl 40046207 0 returned -16 [ 601.256542] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 601.546524] binder_alloc: 26236: binder_alloc_buf, no vma [ 601.552609] binder: send failed reply for transaction 14 to 26236:26241 [ 601.552633] binder: undelivered TRANSACTION_COMPLETE 15:11:45 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) dup3(r1, r0, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) 15:11:46 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x0, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 601.552643] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.736964] binder: 26236:26259 transaction failed 29189/-3, size 0-0 line 3135 [ 601.767182] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 601.860844] binder: undelivered TRANSACTION_ERROR: 29189 15:11:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000), 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 15:11:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 601.918048] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:11:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0), 0x0, 0x400}], 0x0, &(0x7f0000000500)) 15:11:46 executing program 4: mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 15:11:46 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) dup3(r1, r0, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:46 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x0, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:46 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESHEX], 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 15:11:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5435, &(0x7f0000000080)) 15:11:47 executing program 4: [ 602.698242] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:11:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, &(0x7f0000000500)) 15:11:47 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:47 executing program 0: 15:11:47 executing program 5: 15:11:47 executing program 4: 15:11:47 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) [ 603.370817] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:11:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, &(0x7f0000000500)) 15:11:47 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:47 executing program 4: 15:11:47 executing program 0: 15:11:47 executing program 5: 15:11:48 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:48 executing program 4: 15:11:48 executing program 0: [ 604.087983] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:11:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, &(0x7f0000000500)) 15:11:48 executing program 5: 15:11:48 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:48 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:48 executing program 4: 15:11:48 executing program 0: [ 604.616689] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 604.629411] kauditd_printk_skb: 434 callbacks suppressed 15:11:49 executing program 5: [ 604.629419] audit: type=1400 audit(1538147508.904:32534): avc: denied { map } for pid=26348 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:49 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 604.653571] audit: type=1400 audit(1538147508.934:32535): avc: denied { map } for pid=26347 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:49 executing program 4: 15:11:49 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:49 executing program 0: [ 604.654853] audit: type=1400 audit(1538147508.934:32536): avc: denied { map } for pid=26347 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:49 executing program 5: [ 604.660803] audit: type=1400 audit(1538147508.944:32537): avc: denied { map } for pid=26346 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 604.664392] audit: type=1400 audit(1538147508.944:32538): avc: denied { map } for pid=26348 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 604.674109] audit: type=1400 audit(1538147508.954:32539): avc: denied { map } for pid=26346 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 604.679762] audit: type=1400 audit(1538147508.954:32540): avc: denied { map } for pid=26347 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 604.684460] audit: type=1400 audit(1538147508.964:32541): avc: denied { map } for pid=26348 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 604.698040] audit: type=1400 audit(1538147508.974:32542): avc: denied { map } for pid=26346 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 604.699660] audit: type=1400 audit(1538147508.974:32543): avc: denied { map } for pid=26347 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78", 0x4d, 0x400}], 0x0, &(0x7f0000000500)) 15:11:50 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:50 executing program 4: 15:11:50 executing program 0: 15:11:50 executing program 5: 15:11:50 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:50 executing program 4: 15:11:50 executing program 5: 15:11:50 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:50 executing program 0: 15:11:50 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r2 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:50 executing program 4: [ 606.679491] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78", 0x4d, 0x400}], 0x0, &(0x7f0000000500)) 15:11:51 executing program 5: 15:11:51 executing program 0: 15:11:51 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:51 executing program 4: 15:11:51 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:51 executing program 5: [ 607.336248] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:51 executing program 0: 15:11:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78", 0x4d, 0x400}], 0x0, &(0x7f0000000500)) 15:11:51 executing program 4: 15:11:51 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:51 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:52 executing program 5: 15:11:52 executing program 0: 15:11:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1}]}]}, 0x16c}}, 0x0) [ 607.955159] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774", 0x5a, 0x400}], 0x0, &(0x7f0000000500)) 15:11:52 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 15:11:52 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:11:52 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:52 executing program 0: syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000000401, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)="eb3c906d6b66732e666174000204010a0200027400f001", 0x17}], 0x0, &(0x7f0000000200)) 15:11:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x1, 0x6c000000, &(0x7f00000001c0)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) [ 608.685363] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:53 executing program 1: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 15:11:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774", 0x5a, 0x400}], 0x0, &(0x7f0000000500)) 15:11:53 executing program 5: 15:11:53 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 609.089302] binder: 26458:26460 ERROR: BC_REGISTER_LOOPER called without request [ 609.183459] binder: undelivered transaction 22, put_user failed [ 609.191141] binder: 26458:26460 ioctl c0306201 20000040 returned -14 [ 609.196799] FAT-fs (loop0): codepage cp437 not found 15:11:53 executing program 0: [ 609.280978] FAT-fs (loop0): codepage cp437 not found 15:11:53 executing program 1: [ 609.377429] binder: BINDER_SET_CONTEXT_MGR already set [ 609.387179] binder: 26458:26461 ioctl 40046207 0 returned -16 15:11:53 executing program 5: [ 609.424699] binder: 26458:26460 ERROR: BC_REGISTER_LOOPER called without request [ 609.469761] binder: 26458:26460 transaction failed 29189/-22, size 0-0 line 3012 [ 609.469808] binder: undelivered TRANSACTION_ERROR: 29189 [ 609.469821] binder: undelivered TRANSACTION_COMPLETE 15:11:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774", 0x5a, 0x400}], 0x0, &(0x7f0000000500)) 15:11:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x1, 0x6c000000, &(0x7f00000001c0)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) [ 609.473394] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 609.635240] kauditd_printk_skb: 355 callbacks suppressed [ 609.635248] audit: type=1400 audit(1538147513.914:32899): avc: denied { map } for pid=26474 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:54 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x1, 0x6c000000, &(0x7f00000001c0)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) [ 609.860083] audit: type=1400 audit(1538147513.954:32900): avc: denied { map } for pid=26475 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:54 executing program 1: [ 610.013721] audit: type=1400 audit(1538147513.964:32901): avc: denied { map } for pid=26475 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:54 executing program 0: [ 610.166017] binder: 26483:26486 ERROR: BC_REGISTER_LOOPER called without request [ 610.226022] audit: type=1400 audit(1538147513.964:32902): avc: denied { map } for pid=26475 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:54 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x1, 0x6c000000, &(0x7f00000001c0)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) 15:11:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) [ 610.254238] binder: undelivered transaction 25, put_user failed [ 610.254259] binder: 26483:26486 ioctl c0306201 20000040 returned -14 [ 610.258798] binder: undelivered TRANSACTION_COMPLETE 15:11:54 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) pselect6(0x40, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)={0x77359400}, &(0x7f0000001180)={&(0x7f0000001140), 0x8}) [ 610.308845] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x1, 0x6c000000, &(0x7f00000001c0)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)}) [ 610.490928] binder: 26493:26494 ERROR: BC_REGISTER_LOOPER called without request 15:11:55 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000005480), &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) chdir(&(0x7f0000000080)='./file0\x00') mknod(&(0x7f0000000200)='./file0\x00', 0x1000, 0x0) [ 610.598682] binder: undelivered transaction 27, put_user failed 15:11:55 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 610.598704] binder: 26493:26494 ioctl c0306201 20000040 returned -14 [ 610.603791] binder: undelivered TRANSACTION_COMPLETE [ 610.639369] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.639375] audit: audit_lost=1451 audit_rate_limit=0 audit_backlog_limit=64 [ 610.639379] audit: backlog limit exceeded [ 610.653072] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.653078] audit: audit_lost=1452 audit_rate_limit=0 audit_backlog_limit=64 [ 610.653082] audit: backlog limit exceeded 15:11:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) [ 610.912643] binder: 26502:26506 ERROR: BC_REGISTER_LOOPER called without request 15:11:55 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0), 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='gre0\x00') [ 610.979379] binder_alloc: 26502: binder_alloc_buf, no vma [ 610.979409] binder: 26502:26507 transaction failed 29189/-3, size 0-0 line 3135 [ 610.992263] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 611.281931] binder: BINDER_SET_CONTEXT_MGR already set [ 611.281942] binder: 26515:26521 ioctl 40046207 0 returned -16 15:11:55 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 611.286900] binder: 26515:26521 ERROR: BC_REGISTER_LOOPER called without request [ 611.398475] binder_alloc: 26502: binder_alloc_buf, no vma [ 611.398503] binder: 26515:26525 transaction failed 29189/-3, size 0-0 line 3135 15:11:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x28, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0xa8}}, 0x0) 15:11:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x17, &(0x7f0000000100)={@multicast1, @loopback, @broadcast}, 0xc) [ 611.630551] binder: undelivered TRANSACTION_ERROR: 29189 [ 611.690728] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) 15:11:56 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x0) fstat(r0, &(0x7f00000005c0)) [ 612.018606] binder: undelivered TRANSACTION_ERROR: 29189 15:11:56 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x64, 0x0) getdents64(r0, &(0x7f0000000200)=""/25, 0x19) [ 612.232196] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5cf7cf", 0x63, 0x400}], 0x0, &(0x7f0000000500)) 15:11:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28000, 0x2) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x0, 0x18, 0x4, 0x3, "e6344f0e330252fc67c569bc83e01ae07416ad65e0630c9539843a2c83ed7e7c"}) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000800)={0x9a53, 0xffffffffffffff60, 0x6}) r3 = accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x80000) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000700)={0x0, 0x8000, 0x1, 0x6, 0x1, [{0xaf, 0x5, 0x0, 0x0, 0x0, 0x400}]}) 15:11:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x0, 0x80000, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r2, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="080000000ab943613fa93e2f4abb992fbb"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) personality(0x200000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}}) connect(r2, &(0x7f00000012c0)=@nl=@unspec, 0x80) 15:11:57 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00008c2fd4)={0x1, 0x8, 0x209e1a, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000a55000)={r0, &(0x7f000021ff86)="68831f84d78a02e50953cca5e4def7dbcfa428de4f447d69dbecc89ee1d9056e278fce5249f56bbcb7123f", &(0x7f0000f57fc0)=""/64}, 0x18) 15:11:57 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 612.962442] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) 15:11:57 executing program 1: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50ffc}]}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)) 15:11:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000e40)={&(0x7f0000000040), 0xc, &(0x7f0000000e00)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x329, 0x0, 0x0, {0x0, r1, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 15:11:57 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) 15:11:57 executing program 5: r0 = inotify_init1(0x0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="c7", 0x1}], 0x1, 0x0) 15:11:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x0, 0x80000, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(r2, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="080000000ab943613fa93e2f4abb992fbb"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10) personality(0x200000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}}) connect(r2, &(0x7f00000012c0)=@nl=@unspec, 0x80) [ 613.757594] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) 15:11:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000}) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) 15:11:58 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x0) pipe(&(0x7f0000035ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000ccb000)='./bus\x00', 0x0) r3 = open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) dup3(r0, r3, 0x0) dup3(r2, r1, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00003d6ff4)) open(&(0x7f0000272ffa)='./bus\x00', 0x0, 0x0) [ 614.487335] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:11:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) [ 614.663160] kauditd_printk_skb: 566 callbacks suppressed [ 614.663169] audit: type=1400 audit(1538147518.944:33262): avc: denied { map } for pid=26621 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x328, [0x200003c0, 0x0, 0x0, 0x20000548, 0x20000578], 0x0, &(0x7f0000000000), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'ip6gre0\x00', 'bcsf0\x00', 'teql0\x00', @dev, [], @dev, [], 0x120, 0x120, 0x158, [@rateest={'rateest\x00', 0x48, {{'nr0\x00', 'ip6gre0\x00'}}}, @owner={'owner\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@random="196002f0dd7f"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bond_slave_1\x00', 'eql\x00', 'gre0\x00', 'vlan0\x00', @dev, [], @local, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@loopback}}}]}}, @snat={'snat\x00', 0x10, {{@link_local}}}}]}]}, 0x3a0) 15:11:59 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000a24000), &(0x7f00002bf000)='syzkaller\x00', 0x6, 0xb7, &(0x7f0000061f49)=""/183}, 0x48) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f000000e000)={&(0x7f00000026a7)='./file0\x00'}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 15:11:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f0000000100), &(0x7f00000000c0)=0xe8) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') 15:11:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./file1\x00', 0x4000040, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) [ 614.900918] audit: type=1400 audit(1538147518.944:33263): avc: denied { map } for pid=26617 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:11:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0x400008bca) [ 615.120079] audit: type=1400 audit(1538147518.984:33264): avc: denied { map } for pid=26620 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 615.215345] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:59 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f0000000440), 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000500), 0x0) gettid() timer_create(0x0, &(0x7f0000000080), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) 15:11:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5cf7", 0x62, 0x400}], 0x0, &(0x7f0000000500)) [ 615.215352] audit: audit_lost=1522 audit_rate_limit=0 audit_backlog_limit=64 [ 615.215356] audit: backlog limit exceeded 15:11:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x1170, [0x0, 0x20000680, 0x20001088, 0x20001528], 0x0, &(0x7f0000000000), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'veth0_to_bridge\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'dummy0\x00', @local, [], @random="169ad0350118", [], 0x948, 0x9a8, 0x9d8, [@among={'among\x00', 0x8b0, {{0x5, 0x0, 0x0, {[], 0x2, [{[], @rand_addr}, {[], @local}]}, {[], 0xa, [{[], @multicast1}, {}, {[], @broadcast}, {[], @broadcast}, {[], @remote}, {[], @loopback}, {[], @multicast2}, {[], @rand_addr}, {[], @broadcast}, {[], @remote}]}}}}]}, [@common=@redirect={'redirect\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x1b, 0x0, 0x0, 'veth1_to_bond\x00', 'ip6_vti0\x00', 'bond0\x00', 'bond_slave_0\x00', @empty, [], @link_local, [], 0xb0, 0x118, 0x168, [@quota={'quota\x00', 0x18}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@dnat={'dnat\x00', 0x10, {{@dev}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}, {{{0x3, 0x0, 0x0, 'veth0_to_team\x00', 'erspan0\x00', 'veth1_to_bond\x00', 'tunl0\x00', @remote, [], @local, [], 0x2d8, 0x2d8, 0x308, [@bpf0={'bpf\x00', 0x210}, @state={'state\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'bridge_slave_0\x00', 'lo\x00', 'gretap0\x00', 'bridge_slave_0\x00', @local, [], @remote, [], 0xe8, 0x218, 0x268, [@ip={'ip\x00', 0x20, {{@loopback, @remote}}}, @cgroup0={'cgroup\x00', 0x8}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}]}, 0x11e8) [ 615.233612] audit: audit_backlog=65 > audit_backlog_limit=64 15:11:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') getdents(r0, &(0x7f0000000140)=""/111, 0x6f) [ 615.233618] audit: audit_lost=1523 audit_rate_limit=0 audit_backlog_limit=64 [ 615.233621] audit: backlog limit exceeded [ 615.263208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.374857] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 615.773743] FAT-fs (loop5): codepage cp437 not found [ 615.896033] FAT-fs (loop5): codepage cp437 not found 15:12:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 15:12:00 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000480)) ioctl$sock_FIOSETOWN(r0, 0xb702, &(0x7f0000000440)) [ 616.051458] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:12:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) 15:12:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x59) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000740)={@multicast2, @local}, 0xc) 15:12:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5c", 0x61, 0x400}], 0x0, &(0x7f0000000500)) 15:12:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 15:12:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) [ 616.683005] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:12:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'vcan0\x00'}) 15:12:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) 15:12:01 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x90c) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x0) 15:12:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000440)=0x3) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000100)=0x5) 15:12:01 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a4a000), &(0x7f00007c4000)) 15:12:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) [ 617.379171] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:12:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) 15:12:01 executing program 0: socketpair$unix(0x1, 0x10000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0) 15:12:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getlink={0x50, 0x12, 0xf01, 0x0, 0x0, {}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'teql0\x00'}, @IFLA_CARRIER={0x8}, @IFLA_ADDRESS={0xc, 0x1, @random="3f3548d65406"}]}, 0x50}}, 0x0) 15:12:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) 15:12:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, &(0x7f0000000080)) [ 618.100109] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:12:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd", 0x60, 0x400}], 0x0, &(0x7f0000000500)) 15:12:02 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) 15:12:02 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a4a000), &(0x7f00007c4000)) 15:12:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) [ 618.612200] binder: 26745:26748 transaction failed 29201/-28, size 0-0 line 3135 15:12:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, &(0x7f0000000080)) [ 618.737878] binder_alloc: binder_alloc_mmap_handler: 26745 20001000-20004000 already mapped failed -16 15:12:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0xffff) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000009300)={&(0x7f0000000080), 0xc, &(0x7f00000092c0)={&(0x7f0000008c00)={0x14}, 0x14}}, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) lseek(r1, 0x0, 0x3) [ 618.753819] binder: BINDER_SET_CONTEXT_MGR already set [ 618.753830] binder: 26745:26748 ioctl 40046207 0 returned -16 [ 618.869938] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 15:12:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5c", 0x61}], 0x0, &(0x7f0000000500)) [ 618.999055] binder_alloc: 26745: binder_alloc_buf, no vma [ 619.025816] binder: undelivered TRANSACTION_ERROR: 29201 [ 619.103438] binder: 26745:26764 transaction failed 29189/-3, size 0-0 line 3135 15:12:03 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) 15:12:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 619.179385] binder: undelivered TRANSACTION_ERROR: 29189 15:12:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, &(0x7f0000000080)) 15:12:03 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000004c0)="1b0000004a000700ab092500090007000aab80ff01000000000036", 0x1b) [ 619.607065] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:12:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5c", 0x61}], 0x0, &(0x7f0000000500)) [ 619.673592] kauditd_printk_skb: 531 callbacks suppressed [ 619.673601] audit: type=1400 audit(1538147523.944:33674): avc: denied { map } for pid=26777 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:04 executing program 1: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) 15:12:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, &(0x7f0000000080)) 15:12:04 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a4a000), &(0x7f00007c4000)) [ 619.888564] audit: type=1400 audit(1538147523.944:33675): avc: denied { map } for pid=26773 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 619.902772] binder: 26776:26782 transaction failed 29201/-28, size 0-0 line 3135 [ 619.960103] binder: undelivered TRANSACTION_ERROR: 29201 15:12:04 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f00000002c0), 0x62, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) unshare(0x20000000) [ 620.136037] audit: type=1400 audit(1538147523.954:33676): avc: denied { map } for pid=26777 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 620.300295] audit: type=1400 audit(1538147523.954:33677): avc: denied { map } for pid=26777 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="80000000000200099f027100e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efd29740d003b343a489837d413a4f6258308c78ecce52000000000000f9049774f1f7000027fd5c", 0x61}], 0x0, &(0x7f0000000500)) [ 620.356644] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:12:04 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5504, &(0x7f0000000080)) [ 620.506640] audit: type=1400 audit(1538147523.954:33678): avc: denied { map } for pid=26777 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:04 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) 15:12:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 620.622233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 620.622240] audit: audit_lost=1565 audit_rate_limit=0 audit_backlog_limit=64 [ 620.622245] audit: backlog limit exceeded [ 620.633999] audit: audit_backlog=65 > audit_backlog_limit=64 [ 620.634005] audit: audit_lost=1566 audit_rate_limit=0 audit_backlog_limit=64 [ 620.682347] binder: 26800:26804 transaction failed 29201/-28, size 0-0 line 3135 [ 620.684396] binder: undelivered TRANSACTION_ERROR: 29201 15:12:05 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5504, &(0x7f0000000080)) [ 621.163351] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:12:05 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f00000002c0), 0x62, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) unshare(0x20000000) 15:12:05 executing program 1: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000f8", 0x24) [ 621.430759] binder: 26820:26822 transaction failed 29201/-28, size 0-0 line 3135 [ 621.557369] binder: undelivered TRANSACTION_ERROR: 29201 15:12:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:06 executing program 2: syz_mount_image$f2fs(&(0x7f0000001dc0)='f2fs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000180)) 15:12:06 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a4a000), &(0x7f00007c4000)) 15:12:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200), 0x0) 15:12:06 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000023000)={&(0x7f0000024000)={0x10, 0x6000c00e}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xb03, 0x0, 0x0, {0x800003}}, 0x14}}, 0x0) 15:12:06 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5504, &(0x7f0000000080)) 15:12:06 executing program 3: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x71) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) [ 622.139238] binder: 26836:26838 transaction failed 29189/-22, size 0-0 line 3012 [ 622.211413] binder: undelivered TRANSACTION_ERROR: 29189 15:12:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b", 0x12) 15:12:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 622.398584] f2fs_msg: 4 callbacks suppressed 15:12:06 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5504, &(0x7f0000000080)) [ 622.398594] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 622.508518] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 622.572709] attempt to access beyond end of device [ 622.618851] loop2: rw=12288, want=8200, limit=20 [ 622.650569] attempt to access beyond end of device 15:12:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) [ 622.683077] loop2: rw=12288, want=12296, limit=20 [ 622.722570] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 622.765961] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 622.806249] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 15:12:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b", 0x12) [ 622.867793] attempt to access beyond end of device 15:12:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 622.875252] binder: 26857:26858 transaction failed 29189/-22, size 0-0 line 3012 [ 622.875820] binder: undelivered TRANSACTION_ERROR: 29189 [ 623.004024] loop2: rw=12288, want=8200, limit=20 [ 623.039566] attempt to access beyond end of device [ 623.066788] loop2: rw=12288, want=12296, limit=20 [ 623.108986] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 15:12:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) 15:12:07 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5504, &(0x7f0000000080)) 15:12:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) 15:12:07 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b", 0x12) [ 623.515765] binder: 26873:26876 transaction failed 29189/-22, size 0-0 line 3012 [ 623.561927] binder: undelivered TRANSACTION_ERROR: 29189 15:12:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:07 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5504, &(0x7f0000000080)) 15:12:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) 15:12:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed000000800008", 0x1b) [ 623.844831] binder: 26882:26884 got new transaction with bad transaction stack, transaction 44 has target 26882:0 [ 623.919161] binder: 26882:26884 transaction failed 29201/-71, size 0-0 line 3039 15:12:08 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x0) [ 624.032679] binder: BINDER_SET_CONTEXT_MGR already set 15:12:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 624.069496] binder: 26882:26892 ioctl 40046207 0 returned -16 [ 624.081107] binder_alloc: 26882: binder_alloc_buf, no vma [ 624.081136] binder: 26882:26884 transaction failed 29189/-3, size 0-0 line 3135 15:12:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 624.124327] binder: send failed reply for transaction 44 to 26882:26884 [ 624.124355] binder: undelivered TRANSACTION_ERROR: 29189 [ 624.138083] binder_alloc: 26882: binder_alloc_buf, no vma [ 624.138175] binder: 26882:26895 transaction failed 29189/-3, size 0-0 line 3135 [ 624.151179] binder: undelivered TRANSACTION_ERROR: 29189 [ 624.198891] binder_alloc: 26891: binder_alloc_buf, no vma [ 624.198917] binder: 26891:26896 transaction failed 29189/-3, size 0-0 line 3135 [ 624.199898] binder: undelivered TRANSACTION_ERROR: 29189 15:12:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:08 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed000000800008", 0x1b) 15:12:08 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000000100)={0x11, 0x1f, r1}, 0x14) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000200)={@broadcast}, &(0x7f00000001c0)) [ 624.683906] kauditd_printk_skb: 450 callbacks suppressed [ 624.683915] audit: type=1400 audit(1538147528.964:33999): avc: denied { map } for pid=26905 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 624.796220] binder_alloc: 26910: binder_alloc_buf, no vma [ 624.796247] binder: 26910:26912 transaction failed 29189/-3, size 0-0 line 3135 15:12:09 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed000000800008", 0x1b) [ 624.797153] binder: undelivered TRANSACTION_ERROR: 29189 15:12:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) [ 625.056719] audit: type=1400 audit(1538147528.964:34000): avc: denied { map } for pid=26908 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 625.208692] binder: 26917:26921 got new transaction with bad transaction stack, transaction 53 has target 26917:0 15:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 625.208706] binder: 26917:26921 transaction failed 29201/-71, size 0-0 line 3039 [ 625.250829] binder: release 26917:26921 transaction 53 out, still active 15:12:09 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) [ 625.277915] binder: send failed reply for transaction 53, target dead 15:12:09 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300", 0x20) [ 625.327307] binder_alloc: 26925: binder_alloc_buf, no vma 15:12:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 625.327347] binder: 26925:26926 transaction failed 29189/-3, size 0-0 line 3135 [ 625.328278] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.383695] audit: audit_backlog=65 > audit_backlog_limit=64 15:12:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 625.383701] audit: audit_lost=1610 audit_rate_limit=0 audit_backlog_limit=64 [ 625.383704] audit: backlog limit exceeded [ 625.388223] audit: audit_backlog=65 > audit_backlog_limit=64 [ 625.388229] audit: audit_lost=1611 audit_rate_limit=0 audit_backlog_limit=64 [ 625.388232] audit: backlog limit exceeded [ 625.441658] audit: audit_backlog=65 > audit_backlog_limit=64 15:12:10 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:10 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) tkill(r0, 0x1000000000016) [ 625.441664] audit: audit_lost=1612 audit_rate_limit=0 audit_backlog_limit=64 15:12:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x103c}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x1e4, &(0x7f000000cf3d)=""/195}, 0x48) [ 625.728617] binder: 26936:26939 transaction failed 29189/-22, size 0-0 line 3012 15:12:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300", 0x20) [ 625.729157] binder: undelivered TRANSACTION_ERROR: 29189 [ 625.892552] binder: 26935:26941 got new transaction with bad transaction stack, transaction 59 has target 26935:0 15:12:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 625.892566] binder: 26935:26941 transaction failed 29201/-71, size 0-0 line 3039 [ 625.947126] binder: release 26935:26941 transaction 59 out, still active 15:12:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 625.957435] binder: send failed reply for transaction 59, target dead [ 626.290876] binder: 26952:26955 transaction failed 29189/-22, size 0-0 line 3012 [ 626.291393] binder: undelivered TRANSACTION_ERROR: 29189 15:12:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) [ 626.665933] binder: 26957:26961 got new transaction with bad transaction stack, transaction 63 has target 26957:0 [ 626.699971] binder: 26957:26961 transaction failed 29201/-71, size 0-0 line 3039 15:12:11 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300", 0x20) [ 626.754056] binder: 26966:26969 transaction failed 29201/-28, size 0-0 line 3135 15:12:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) 15:12:11 executing program 4: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 626.802219] binder: undelivered TRANSACTION_ERROR: 29201 [ 626.834493] binder: send failed reply for transaction 63 to 26957:26961 [ 626.890509] binder: undelivered TRANSACTION_ERROR: 29189 15:12:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000380)) set_robust_list(&(0x7f0000000440)={&(0x7f0000000200)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000340)={&(0x7f0000000240)}}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="000100000200000066000000c9030000ec00002f000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 15:12:11 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed00000080000800080003000100", 0x22) [ 627.307723] binder: send failed reply for transaction 67 to 26977:26982 [ 627.331401] binder: undelivered TRANSACTION_ERROR: 29189 [ 627.572108] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 627.620418] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size 15:12:13 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000540)="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", 0x1f7, 0x9}]) 15:12:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:13 executing program 4: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x40087101, 0x800000) 15:12:13 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed00000080000800080003000100", 0x22) 15:12:13 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x40087101, 0x800000) 15:12:13 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed00000080000800080003000100", 0x22) 15:12:13 executing program 4: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:14 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 629.693245] kauditd_printk_skb: 679 callbacks suppressed [ 629.693252] audit: type=1400 audit(1538147533.974:34409): avc: denied { call } for pid=27019 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 15:12:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 629.744932] binder: release 27019:27028 transaction 69 out, still active [ 629.774833] binder: send failed reply for transaction 69, target dead [ 629.949952] audit: type=1400 audit(1538147533.984:34410): avc: denied { map } for pid=27026 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:14 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000", 0x23) 15:12:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4), 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x10, 0x311}, 0x14}}, 0x0) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) [ 630.152877] audit: type=1400 audit(1538147533.984:34411): avc: denied { map } for pid=27026 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:14 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x40087101, 0x800000) [ 630.374285] audit: type=1400 audit(1538147533.984:34412): avc: denied { map } for pid=27026 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 630.461193] binder: release 27044:27048 transaction 71 out, still active 15:12:14 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000", 0x23) 15:12:14 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 630.470529] binder: send failed reply for transaction 71, target dead 15:12:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 630.599187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 630.599193] audit: audit_lost=1703 audit_rate_limit=0 audit_backlog_limit=64 15:12:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 630.599196] audit: backlog limit exceeded 15:12:15 executing program 0: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000880)=0x102, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="c5", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)='&', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xaaff, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 630.652626] audit: audit_backlog=65 > audit_backlog_limit=64 15:12:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 630.652632] audit: audit_lost=1704 audit_rate_limit=0 audit_backlog_limit=64 [ 630.652636] audit: backlog limit exceeded [ 630.750624] binder: 27053:27057 transaction failed 29189/-22, size 0-0 line 3012 [ 630.757837] binder: undelivered TRANSACTION_ERROR: 29189 15:12:15 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 630.901459] binder: 27063:27065 transaction failed 29189/-22, size 0-0 line 3012 15:12:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="240000001a0025f00485bc000400001c0a0b49ffed0000008000080008000300010000", 0x23) [ 631.290853] binder: 27071:27074 transaction failed 29189/-22, size 0-0 line 3012 [ 631.331166] binder: undelivered TRANSACTION_ERROR: 29189 15:12:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) 15:12:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x179) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) [ 631.612806] binder: 27077:27082 transaction failed 29189/-22, size 0-0 line 3012 15:12:16 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x28, 0x8400, 0x20, 0x0, 0xffffffffffffffff, 0x0, [0x8061, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) 15:12:16 executing program 4: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 631.920729] binder: 27091:27093 transaction failed 29189/-22, size 0-0 line 3012 [ 631.931949] binder: undelivered TRANSACTION_ERROR: 29189 15:12:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 632.221041] binder: 27096:27100 transaction failed 29189/-22, size 0-0 line 3012 15:12:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) recvfrom$unix(r0, &(0x7f0000001640)=""/192, 0xc0, 0x0, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) 15:12:16 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 632.276796] binder: 27096:27106 transaction failed 29189/-22, size 0-0 line 3012 15:12:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 632.392059] binder: undelivered TRANSACTION_ERROR: 29189 15:12:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x400}, 0x14) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 15:12:16 executing program 4: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) 15:12:16 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r0, 0x40087101, 0x800000) 15:12:17 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) recvfrom$unix(r0, &(0x7f0000001640)=""/192, 0xc0, 0x0, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) 15:12:17 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r0, 0x40087101, 0x800000) [ 633.015790] binder_alloc: 27119: binder_alloc_buf, no vma [ 633.070469] binder: 27119:27126 transaction failed 29189/-3, size 0-0 line 3135 [ 633.084094] binder_alloc: 27119: binder_alloc_buf, no vma 15:12:17 executing program 4: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 633.112598] binder: 27119:27132 transaction failed 29189/-3, size 0-0 line 3135 15:12:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 633.180167] binder: undelivered TRANSACTION_ERROR: 29189 15:12:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write(r2, &(0x7f00000000c0)="2400000058001f00ff03f4f9002304000a04f51103000100020100020800028001c9a800", 0x24) 15:12:17 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:17 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r0, 0x40087101, 0x800000) 15:12:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) recvfrom$unix(r0, &(0x7f0000001640)=""/192, 0xc0, 0x0, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) 15:12:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880)}) [ 633.712562] binder_alloc: 27145: binder_alloc_buf, no vma [ 633.762819] binder: 27145:27148 transaction failed 29189/-3, size 0-0 line 3135 15:12:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000080), 0x1}, 0x20) [ 633.770675] binder_alloc: 27145: binder_alloc_buf, no vma 15:12:18 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 633.770700] binder: 27145:27152 transaction failed 29189/-3, size 0-0 line 3135 15:12:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 633.858216] netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'. 15:12:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 634.025805] binder: undelivered TRANSACTION_ERROR: 29189 15:12:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880)}) 15:12:18 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x400000000000004, r0}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000020000006a0a00fe00000000850000000b000000b7000000000000009500040000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x33, &(0x7f00000002c0)="11586cb5ed7b658f5edb157d8bd4", &(0x7f0000000080)=""/51, 0x4000}, 0x28) 15:12:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 634.512338] binder_alloc: 27167: binder_alloc_buf, no vma [ 634.547235] binder: 27167:27173 transaction failed 29189/-3, size 0-0 line 3135 [ 634.558646] binder_alloc: 27167: binder_alloc_buf, no vma [ 634.558668] binder: 27167:27175 transaction failed 29189/-3, size 0-0 line 3135 15:12:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 634.710977] binder: undelivered TRANSACTION_ERROR: 29189 [ 634.716510] kauditd_printk_skb: 374 callbacks suppressed [ 634.716518] audit: type=1400 audit(1538147538.994:34733): avc: denied { map } for pid=27177 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:19 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) recvfrom$unix(r0, &(0x7f0000001640)=""/192, 0xc0, 0x0, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) 15:12:19 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x400000000000004, r0}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 634.738430] audit: type=1400 audit(1538147539.014:34734): avc: denied { map } for pid=27177 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 634.752301] audit: type=1400 audit(1538147539.034:34735): avc: denied { map } for pid=27177 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x14, 0x0, 0x6, 0x1}, 0x14}}, 0x0) [ 634.790113] audit: type=1400 audit(1538147539.044:34736): avc: denied { map } for pid=27177 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:19 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:19 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x400000000000004, r0}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 634.790135] audit: type=1400 audit(1538147539.054:34737): avc: denied { map } for pid=27179 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 634.790154] audit: type=1400 audit(1538147539.054:34738): avc: denied { map } for pid=27179 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 634.795144] audit: type=1400 audit(1538147539.074:34739): avc: denied { map } for pid=27177 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 634.801695] audit: type=1400 audit(1538147539.084:34740): avc: denied { map } for pid=27179 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 634.806142] audit: type=1400 audit(1538147539.084:34741): avc: denied { map } for pid=27177 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 634.812133] audit: type=1400 audit(1538147539.084:34742): avc: denied { map } for pid=27179 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880)}) 15:12:20 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:20 executing program 0: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) pause() read(r1, &(0x7f00000000c0)=""/117, 0x75) 15:12:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 635.317486] binder: 27189:27192 transaction failed 29189/-22, size 0-0 line 3012 15:12:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) 15:12:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 636.466581] binder: 27223:27227 transaction failed 29189/-22, size 0-0 line 3012 15:12:20 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 636.536675] binder: 27223:27231 transaction failed 29189/-22, size 0-0 line 3012 15:12:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 636.627911] binder: undelivered TRANSACTION_ERROR: 29189 15:12:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x800000) [ 636.972734] binder: 27238:27245 transaction failed 29189/-22, size 0-0 line 3012 15:12:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 636.994057] binder: 27240:27244 transaction failed 29189/-22, size 0-0 line 3012 15:12:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 637.112437] binder: undelivered TRANSACTION_ERROR: 29189 15:12:21 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 15:12:21 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCXONC(r1, 0x40087101, 0x800000) 15:12:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 637.482080] binder: 27254:27256 transaction failed 29189/-22, size 0-0 line 3012 15:12:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}, 0x80000001}}], 0x0, 0x0, &(0x7f0000000880)}) [ 637.532695] binder: undelivered TRANSACTION_ERROR: 29189 15:12:21 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! .'], 0x4) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:12:22 executing program 3: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x40087101, 0x800000) 15:12:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 638.104918] binder_alloc: 27268: binder_alloc_buf size 2147483656 failed, no address space [ 638.179615] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 638.249208] binder: 27271:27276 transaction failed 29201/-28, size 0-0 line 3135 15:12:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}}}], 0x0, 0x0, &(0x7f0000000880)}) [ 638.308125] binder: undelivered TRANSACTION_ERROR: 29201 15:12:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCXONC(r1, 0x40087101, 0x0) 15:12:22 executing program 3: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}}}], 0x0, 0x0, &(0x7f0000000880)}) [ 638.885487] binder: 27291:27294 transaction failed 29189/-22, size 0-0 line 3012 [ 638.921862] binder: undelivered TRANSACTION_ERROR: 29189 [ 639.076329] EXT4-fs (loop0): Ignoring removed nobh option [ 639.104478] EXT4-fs (loop0): invalid inodes per group: 8192 [ 639.104478] 15:12:23 executing program 3: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:23 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0xfffffffffffffda1) mount(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) [ 639.256347] EXT4-fs (loop0): Ignoring removed nobh option [ 639.303323] EXT4-fs (loop0): invalid inodes per group: 8192 [ 639.303323] 15:12:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:23 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 639.328067] binder: 27305:27308 got new transaction with bad transaction stack, transaction 100 has target 27305:0 15:12:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0)}}}], 0x0, 0x0, &(0x7f0000000880)}) [ 639.328081] binder: 27305:27308 transaction failed 29201/-71, size 0-0 line 3039 [ 639.329077] binder: release 27305:27308 transaction 100 out, still active [ 639.376229] binder: send failed reply for transaction 100, target dead 15:12:23 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 639.477484] binder: 27310:27313 transaction failed 29189/-22, size 0-0 line 3012 [ 639.478735] binder: undelivered TRANSACTION_ERROR: 29189 [ 639.723102] kauditd_printk_skb: 352 callbacks suppressed [ 639.723110] audit: type=1400 audit(1538147544.004:35095): avc: denied { map } for pid=27316 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.745330] audit: type=1400 audit(1538147544.024:35096): avc: denied { map } for pid=27319 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.762888] audit: type=1400 audit(1538147544.024:35097): avc: denied { map } for pid=27319 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.764365] audit: type=1400 audit(1538147544.054:35098): avc: denied { map } for pid=27316 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.770791] audit: type=1400 audit(1538147544.054:35099): avc: denied { map } for pid=27316 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.774753] audit: type=1400 audit(1538147544.054:35100): avc: denied { map } for pid=27319 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.783791] audit: type=1400 audit(1538147544.064:35101): avc: denied { map } for pid=27319 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.801362] audit: type=1400 audit(1538147544.084:35102): avc: denied { map } for pid=27316 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.809016] audit: type=1400 audit(1538147544.084:35103): avc: denied { map } for pid=27316 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.813835] audit: type=1400 audit(1538147544.094:35104): avc: denied { map } for pid=27319 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 639.971117] binder_alloc: 27320: binder_alloc_buf, no vma [ 639.971147] binder: 27320:27322 transaction failed 29189/-3, size 0-0 line 3135 [ 640.140794] binder: 27324:27328 transaction failed 29189/-22, size 0-0 line 3012 [ 640.141102] binder: undelivered TRANSACTION_ERROR: 29189 15:12:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:25 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:25 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x2a) ptrace(0x1a, r1) 15:12:25 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:25 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)="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") preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xa2) 15:12:25 executing program 1: bind$unix(0xffffffffffffffff, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xca, &(0x7f0000000100)={{0xa, 0x4e24, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 15:12:25 executing program 4: r0 = eventfd(0x0) close(r0) [ 641.095774] binder_alloc: 27341: binder_alloc_buf, no vma [ 641.121794] binder: 27341:27346 transaction failed 29189/-3, size 0-0 line 3135 15:12:25 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 641.172927] binder_alloc: 27341: binder_alloc_buf, no vma [ 641.178528] binder: 27341:27352 transaction failed 29189/-3, size 0-0 line 3135 [ 641.252440] binder: undelivered TRANSACTION_ERROR: 29189 15:12:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 641.380758] EXT4-fs (loop0): Ignoring removed nobh option 15:12:25 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 641.428733] EXT4-fs (loop0): invalid inodes per group: 8192 [ 641.428733] 15:12:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:25 executing program 5: perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f00000002c0)=0x3f, 0x4) dup3(r0, r1, 0x0) 15:12:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:26 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 641.881776] binder_alloc: 27368: binder_alloc_buf, no vma [ 641.918282] binder: 27368:27372 transaction failed 29189/-3, size 0-0 line 3135 15:12:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 641.936494] binder_alloc: 27368: binder_alloc_buf, no vma [ 641.936521] binder: 27368:27376 transaction failed 29189/-3, size 0-0 line 3135 15:12:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x6c1, 0x80}) 15:12:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 642.081346] binder: undelivered TRANSACTION_ERROR: 29189 15:12:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) [ 642.219086] EXT4-fs (loop0): Ignoring removed nobh option [ 642.279738] EXT4-fs (loop0): invalid inodes per group: 8192 [ 642.279738] 15:12:26 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 642.737891] binder_alloc: 27394: binder_alloc_buf, no vma 15:12:27 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) wait4(0x0, &(0x7f0000000680), 0x0, 0x0) [ 642.834380] binder: 27394:27400 transaction failed 29189/-3, size 0-0 line 3135 15:12:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 642.834496] binder_alloc: 27394: binder_alloc_buf, no vma [ 642.834527] binder: 27394:27406 transaction failed 29189/-3, size 0-0 line 3135 [ 642.874179] EXT4-fs (loop0): Ignoring removed nobh option [ 642.874195] EXT4-fs (loop0): invalid inodes per group: 8192 [ 642.874195] [ 643.012468] binder: undelivered TRANSACTION_ERROR: 29189 15:12:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x0, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000200)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0d", 0x4e}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000400)) 15:12:27 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 643.421303] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 643.544761] binder_alloc: 27419: binder_alloc_buf, no vma [ 643.610123] binder: 27419:27422 transaction failed 29189/-3, size 0-0 line 3135 [ 643.625766] binder_alloc: 27419: binder_alloc_buf, no vma [ 643.625796] binder: 27419:27423 transaction failed 29189/-3, size 0-0 line 3135 [ 643.718340] binder: undelivered TRANSACTION_ERROR: 29189 15:12:28 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) 15:12:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2=0xe0000003, @local}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 15:12:28 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 644.167282] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:28 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) [ 644.343195] binder_alloc: 27441: binder_alloc_buf, no vma [ 644.370144] binder: 27441:27445 transaction failed 29189/-3, size 0-0 line 3135 15:12:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 644.402944] binder_alloc: 27441: binder_alloc_buf, no vma [ 644.402971] binder: 27441:27448 transaction failed 29189/-3, size 0-0 line 3135 15:12:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 644.466103] binder: undelivered TRANSACTION_ERROR: 29189 15:12:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 15:12:28 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 644.675691] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:29 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) [ 644.734189] kauditd_printk_skb: 325 callbacks suppressed [ 644.734198] audit: type=1400 audit(1538147549.014:35430): avc: denied { map } for pid=27456 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340), 0x0, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 644.888283] audit: type=1400 audit(1538147549.024:35431): avc: denied { map } for pid=27456 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x0, './file0\x00'}, 0xa) [ 645.045277] audit: type=1400 audit(1538147549.064:35432): avc: denied { map } for pid=27456 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:29 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:29 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) recvmmsg(r0, &(0x7f0000001ac0), 0x2db, 0x0, 0x0) [ 645.075071] binder: 27461:27469 transaction failed 29189/-22, size 0-0 line 3012 [ 645.360123] audit: type=1400 audit(1538147549.124:35433): avc: denied { map } for pid=27456 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340), 0x0, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:29 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) [ 645.372534] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 645.520434] audit: type=1400 audit(1538147549.124:35434): avc: denied { map } for pid=27456 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x0, './file0\x00'}, 0xa) 15:12:30 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) [ 645.577770] binder: 27480:27482 transaction failed 29189/-22, size 0-0 line 3012 [ 645.758310] audit: type=1400 audit(1538147549.124:35435): avc: denied { map } for pid=27456 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 645.915809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.915816] audit: audit_lost=1723 audit_rate_limit=0 audit_backlog_limit=64 15:12:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340), 0x0, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x0) [ 645.915820] audit: backlog limit exceeded [ 645.917105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.971286] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 646.166923] binder: 27496:27501 transaction failed 29189/-22, size 0-0 line 3012 15:12:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) connect$unix(r0, &(0x7f00003de000)=@file={0x0, './file0\x00'}, 0xa) 15:12:30 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000004}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) 15:12:31 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:31 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) close(r0) [ 646.766016] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f4200204000000000000000000", 0x1d, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 646.902675] binder: release 27519:27523 transaction 125 out, still active [ 646.933324] binder: send failed reply for transaction 125, target dead 15:12:31 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x7332}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 15:12:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x3caddb68}, 0xff45) write$cgroup_int(r0, &(0x7f0000000200)=ANY=[], 0x3ffe00) 15:12:31 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') dup2(r0, r1) 15:12:31 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x8, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) [ 647.354540] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f4200204000000000000000000", 0x1d, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0xf, &(0x7f0000000000)=@req3, 0x1c) 15:12:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x16, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 647.603900] binder: release 27537:27539 transaction 127 out, still active [ 647.628998] binder: send failed reply for transaction 127, target dead 15:12:32 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x7, 0x4, 0x20, 0x100001005}, 0x214) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00007e9000)={r0, &(0x7f0000130000), &(0x7f0000718000)=""/33}, 0x18) 15:12:32 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8") fcntl$setstatus(r0, 0x4, 0x4000) finit_module(r0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8", 0x0) [ 648.025546] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f4200204000000000000000000", 0x1d, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:32 executing program 1: r0 = memfd_create(&(0x7f0000000840)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 648.229624] binder: release 27558:27562 transaction 129 out, still active 15:12:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xe, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 648.291367] binder: send failed reply for transaction 129, target dead 15:12:32 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) 15:12:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfe61) recvmmsg(r0, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f0000000140), 0x0, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400}) sendto$inet6(r0, &(0x7f00000000c0)="040300000100000000000000c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfff0500000000000000c7a67e4b98a35d724459", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @dev}, 0x1c) 15:12:32 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 648.612222] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9", 0x2c, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:33 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1=0xe0000002}}}}}, &(0x7f00003b5000)) [ 648.854517] binder: 27579:27583 got new transaction with bad transaction stack, transaction 131 has target 27579:0 [ 648.924856] binder: 27579:27583 transaction failed 29201/-71, size 0-0 line 3039 [ 648.979776] binder: release 27579:27583 transaction 131 out, still active 15:12:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 649.035777] binder: send failed reply for transaction 131, target dead 15:12:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0xa40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x7}]) [ 649.422405] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:33 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2400000009061f001cfffd946fa2830020200a0003ff0900010006e700000000a3a20800", 0x24}], 0x1}, 0x0) 15:12:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9", 0x2c, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = gettid() r2 = inotify_init1(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) close(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) [ 649.745974] kauditd_printk_skb: 424 callbacks suppressed [ 649.745982] audit: type=1400 audit(1538147554.024:35777): avc: denied { map } for pid=27612 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:34 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 649.920481] audit: type=1400 audit(1538147554.044:35778): avc: denied { map } for pid=27614 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 650.088568] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 650.115016] audit: type=1400 audit(1538147554.044:35780): avc: denied { map } for pid=27613 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9", 0x2c, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:34 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r3 = syz_open_pts(r0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7) r4 = syz_open_pts(r0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x9) dup2(r4, r3) 15:12:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/prev\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x0) [ 650.210758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.210764] audit: audit_lost=1752 audit_rate_limit=0 audit_backlog_limit=64 [ 650.210768] audit: backlog limit exceeded [ 650.218351] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.218356] audit: audit_lost=1753 audit_rate_limit=0 audit_backlog_limit=64 [ 650.218360] audit: backlog limit exceeded [ 650.225508] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.230628] binder: release 27606:27610 transaction 134 out, still active 15:12:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe", 0x33, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 650.230634] binder: undelivered TRANSACTION_COMPLETE [ 650.235390] binder: send failed reply for transaction 134, target dead [ 650.621882] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:35 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:35 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000040)="c69edcc8772544"}) [ 651.269234] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe", 0x33, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x7, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 651.567760] binder: release 27643:27646 transaction 136 out, still active [ 651.619147] binder: undelivered TRANSACTION_COMPLETE [ 651.656354] binder: send failed reply for transaction 136, target dead 15:12:36 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:36 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x11, 0x66, &(0x7f0000000040)={@loopback}, 0x20) [ 652.040853] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe", 0x33, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 652.267975] binder: 27686:27688 got new transaction with bad transaction stack, transaction 138 has target 27686:0 [ 652.355698] binder: 27686:27688 transaction failed 29201/-71, size 0-0 line 3039 15:12:36 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 652.415013] binder: release 27686:27688 transaction 138 out, still active 15:12:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 652.479758] binder: send failed reply for transaction 138, target dead 15:12:36 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:37 executing program 4: prctl$intptr(0x1c, 0x1) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)="0000000201000000000000010400000000000000", 0x14, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)) 15:12:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 652.864489] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:37 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 653.406029] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:37 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 653.791161] binder: release 27706:27708 transaction 141 out, still active [ 653.824326] binder: send failed reply for transaction 141, target dead 15:12:38 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@utf8='utf8=1'}]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) getdents(r0, &(0x7f0000000400)=""/240, 0xf0) [ 654.010074] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 654.320896] binder: 27738:27741 got new transaction with bad transaction stack, transaction 143 has target 27738:0 15:12:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 654.420520] binder: 27738:27741 transaction failed 29201/-71, size 0-0 line 3039 [ 654.494873] binder: release 27738:27741 transaction 143 out, still active 15:12:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) [ 654.551192] binder: send failed reply for transaction 143, target dead [ 654.733270] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 654.751437] kauditd_printk_skb: 618 callbacks suppressed 15:12:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 654.751445] audit: type=1400 audit(1538147559.034:36238): avc: denied { map } for pid=27752 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 654.755894] audit: type=1400 audit(1538147559.014:36237): avc: denied { map } for pid=27760 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:39 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) [ 654.757381] audit: type=1400 audit(1538147559.034:36239): avc: denied { map } for pid=27760 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:39 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 654.765908] audit: type=1400 audit(1538147559.044:36240): avc: denied { map } for pid=27756 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 654.767320] audit: type=1400 audit(1538147559.044:36241): avc: denied { map } for pid=27756 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:39 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 654.772323] audit: type=1400 audit(1538147559.054:36242): avc: denied { map_read map_write } for pid=27754 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 654.774838] audit: type=1400 audit(1538147559.054:36243): avc: denied { prog_load } for pid=27754 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:12:40 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 654.782461] audit: type=1400 audit(1538147559.064:36244): avc: denied { map } for pid=27760 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 654.788260] audit: type=1400 audit(1538147559.064:36245): avc: denied { map } for pid=27760 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 654.791714] audit: type=1400 audit(1538147559.074:36246): avc: denied { map } for pid=27752 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 655.166010] binder: 27766:27771 unknown command 0 [ 655.166021] binder: 27766:27771 ioctl c0306201 20000440 returned -22 [ 655.840636] binder: release 27766:27771 transaction 146 out, still active [ 655.840642] binder: undelivered TRANSACTION_COMPLETE [ 655.847578] binder: send failed reply for transaction 146, target dead [ 656.407752] binder: 27802:27805 unknown command 4219648 [ 656.407763] binder: 27802:27805 ioctl c0306201 20000440 returned -22 15:12:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:40 executing program 4: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000016fc8)={&(0x7f000000b000)=@can, 0x10, &(0x7f0000002000)=[{&(0x7f0000000000)=""/237, 0xffffffe9}, {&(0x7f0000005000)=""/37, 0x14d}], 0x284}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@jmp]}, &(0x7f000001c000)='syzkaller\x00', 0x1, 0xff11, &(0x7f0000011000)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000015fd8)={r0, 0x0, 0xe, 0x1000, &(0x7f0000007000)="6ffab053d2e85a9912a1ababbc66", &(0x7f0000006000)=""/4096}, 0x28) 15:12:40 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:40 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:40 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:41 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:41 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x5, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @dev}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) 15:12:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x1, 0x0, &(0x7f0000000540)="bc"}) [ 657.166107] binder: send failed reply for transaction 148 to 27802:27805 [ 657.190012] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 657.252546] binder: undelivered TRANSACTION_COMPLETE 15:12:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 657.320136] binder: undelivered TRANSACTION_ERROR: 29189 15:12:41 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) clone(0x7f996a9c1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 15:12:41 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x4}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 657.825671] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:42 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480), 0x1, 0x0, &(0x7f0000000540)="bc"}) 15:12:42 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 657.857412] binder: release 27840:27845 transaction 150 out, still active [ 657.857431] binder: undelivered TRANSACTION_COMPLETE [ 657.908022] binder: send failed reply for transaction 150, target dead 15:12:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x4}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd}, r2, 0x0, 0xffffffffffffffff, 0x0) 15:12:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}, @map={0x18, 0x4}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 658.677368] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 659.197346] binder: release 27855:27861 transaction 152 out, still active [ 659.218053] binder: undelivered TRANSACTION_COMPLETE [ 659.247428] binder: send failed reply for transaction 152, target dead [ 659.762864] kauditd_printk_skb: 525 callbacks suppressed [ 659.762872] audit: type=1400 audit(1538147564.044:36772): avc: denied { map } for pid=27884 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 659.829829] audit: type=1400 audit(1538147564.044:36774): avc: denied { map } for pid=27884 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 659.872044] audit: type=1400 audit(1538147564.044:36773): avc: denied { map } for pid=27885 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 659.897030] audit: type=1400 audit(1538147564.084:36775): avc: denied { map } for pid=27885 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 659.922628] audit: type=1400 audit(1538147564.084:36776): avc: denied { map } for pid=27885 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 659.949563] audit: type=1400 audit(1538147564.084:36777): avc: denied { map } for pid=27885 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 659.987007] audit: type=1400 audit(1538147564.084:36778): avc: denied { map } for pid=27885 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 660.037707] audit: type=1400 audit(1538147564.094:36779): avc: denied { map } for pid=27885 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 660.095756] audit: type=1400 audit(1538147564.094:36780): avc: denied { map } for pid=27885 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 660.121509] audit: type=1400 audit(1538147564.174:36781): avc: denied { map } for pid=27886 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:44 executing program 4: socket$inet6(0xa, 0x400000040004, 0x4) r0 = memfd_create(&(0x7f00000015c0)='\x00', 0x2) r1 = socket$inet6(0xa, 0xfffffffffffe, 0x10001) ioctl(r1, 0x8912, &(0x7f00000005c0)="021cc80500005f8f764070aed4b267f2e0a04fd0c076b8ab3e70d6633818d164d12eeb92a4f69222a4c24897a5f7b82b7164e9367f6f9d21c5e9e4f3adc9ab96954a0bc77ffc34fe5f90e8cbb702abfa385be738e04f264d45af10f0e5c3d5de149bc3ca3e8925d85f85b17088721ac73a67371b4b34ffe0ce5ee4126efa2b8ce8eb219b8de8b03e0849") r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_out(r2, 0x5466, &(0x7f0000000180)) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) fcntl$setownex(r2, 0xf, &(0x7f0000000480)={0x3, r3}) fsetxattr(r2, &(0x7f0000000440)=@known='security.capability\x00', &(0x7f0000000580)='$user{\x00', 0x7, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000001600)={0xa859, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x6}) r4 = dup2(r2, r1) flock(r2, 0x1000000006) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000004c0)=""/140) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r5 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) iopl(0x10000000000c25) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x0, &(0x7f00000001c0)) sendto$inet(r5, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000140), &(0x7f00000001c0), 0x0, 0x0) geteuid() ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000002700)=""/4096) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000007c0)='highspeed\x00', 0xffffffffffffff4b) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r5, r7, &(0x7f0000000080)=0x2, 0x80000003) 15:12:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:44 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)}}}], 0x0, 0x0, &(0x7f0000000540)}) [ 660.631295] binder: 27894:27898 got new transaction with bad transaction stack, transaction 154 has target 27894:0 [ 660.636226] binder: BINDER_SET_CONTEXT_MGR already set [ 660.636242] binder: 27896:27900 ioctl 40046207 0 returned -16 [ 660.657844] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) [ 660.729905] binder_alloc: binder_alloc_mmap_handler: 27896 20000000-20002000 already mapped failed -16 [ 660.758792] binder: BINDER_SET_CONTEXT_MGR already set 15:12:45 executing program 2: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000dd2f63)="24000000240007003200000800367700fbffffff0100000000000000ffffffff0100ff10", 0x24) [ 660.758802] binder: 27896:27900 ioctl 40046207 0 returned -16 [ 660.788919] binder: 27894:27898 transaction failed 29201/-71, size 0-0 line 3039 [ 660.793078] binder: release 27894:27898 transaction 154 out, still active [ 660.793083] binder: undelivered TRANSACTION_COMPLETE [ 660.793095] binder: undelivered TRANSACTION_ERROR: 29201 [ 660.825375] binder: send failed reply for transaction 154, target dead [ 660.825388] binder: send failed reply for transaction 156 to 27896:27900 [ 661.134886] binder: 27896:27920 transaction failed 29189/-22, size 40-8 line 3012 [ 661.166250] binder: undelivered TRANSACTION_ERROR: 29189 15:12:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$notify(r0, 0x402, 0x8000000d) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) unshare(0x40000000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$TIOCSBRK(r1, 0x5427) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={r2, @loopback, @broadcast}, 0xfe42) [ 661.376936] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x40286608, &(0x7f0000000080)={0x6b, 0x0, 0x8, 0x101}) 15:12:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000180)={[{@nobh='nobh'}]}) 15:12:46 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 661.930620] binder: release 27931:27937 transaction 161 out, still active [ 661.960102] binder: send failed reply for transaction 161, target dead [ 662.140999] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 15:12:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="000100000008000081000000c9030000f42002040000000000000000000000000020000020bdfe0040350ce9943df0256e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 15:12:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 662.512667] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 107 (only 16 groups) [ 662.655973] binder: release 27956:27960 transaction 165 out, still active 15:12:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:47 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0xfffffdfd}}) [ 662.709047] binder: send failed reply for transaction 165, target dead 15:12:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000280), 0x10) socket$nl_generic(0x10, 0x3, 0x10) 15:12:47 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 662.917128] EXT4-fs (loop0): invalid inodes per group: 8192 [ 662.917128] 15:12:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:47 executing program 4: r0 = memfd_create(&(0x7f00002d7ffa)='-G\\%(\x00', 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 15:12:47 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 663.359845] binder: release 27972:27976 transaction 169 out, still active 15:12:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 663.426478] input:  as /devices/virtual/input/input21 [ 663.435459] binder: send failed reply for transaction 169, target dead 15:12:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000000180)={0x77359400}, 0x10) 15:12:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:48 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 663.943698] binder: 27999:28001 transaction failed 29189/-22, size 40-8 line 3012 15:12:48 executing program 4: r0 = socket$nl_generic(0x11, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x107, 0x12, &(0x7f0000000955), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x107, 0x12, &(0x7f0000000955), 0x4) 15:12:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380)="03", 0x1, 0x20000004, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 15:12:48 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x0, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 664.519554] binder: 28015:28018 transaction failed 29189/-22, size 40-8 line 3012 15:12:48 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:12:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020307031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) [ 664.771555] kauditd_printk_skb: 490 callbacks suppressed [ 664.771563] audit: type=1400 audit(1538147569.054:37272): avc: denied { map } for pid=28021 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 664.971687] audit: type=1400 audit(1538147569.054:37273): avc: denied { map } for pid=28020 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 15:12:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x0, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 665.245395] audit: type=1400 audit(1538147569.104:37274): avc: denied { map } for pid=28019 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 665.389908] binder: 28041:28044 transaction failed 29189/-22, size 40-8 line 3012 [ 665.484606] audit: type=1400 audit(1538147569.104:37275): avc: denied { map } for pid=28019 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x105000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x6b, 0x5, 0x8, 0x101}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r1, 0x0) [ 665.567127] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.567133] audit: audit_lost=1808 audit_rate_limit=0 audit_backlog_limit=64 15:12:50 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x200096e, 0x4) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000c40)=""/160, 0xa0}, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 665.567137] audit: backlog limit exceeded 15:12:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) [ 665.568632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 665.568638] audit: audit_lost=1809 audit_rate_limit=0 audit_backlog_limit=64 [ 665.568642] audit: backlog limit exceeded 15:12:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x0, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 665.987160] binder_alloc: 28056: binder_alloc_buf, no vma [ 666.018543] binder: 28056:28058 transaction failed 29189/-3, size 40-8 line 3135 15:12:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) clock_gettime(0xb, &(0x7f0000000000)) 15:12:50 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f000000dff8)=@file={0x1}, 0x2) 15:12:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 15:12:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 666.704825] binder_alloc: 28081: binder_alloc_buf, no vma [ 666.737451] binder: 28081:28084 transaction failed 29189/-3, size 40-8 line 3135 15:12:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r0) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 15:12:51 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206020200a84309c026236903000b0000c90200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) 15:12:51 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:51 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 15:12:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 667.309417] binder_alloc: 28095: binder_alloc_buf, no vma [ 667.360680] binder: 28095:28099 transaction failed 29189/-3, size 40-8 line 3135 15:12:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 15:12:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) clock_gettime(0x0, &(0x7f0000004340)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004180)=[{{&(0x7f0000003b00)=@xdp, 0x80, &(0x7f0000003bc0), 0x0, &(0x7f0000003c00)=""/127, 0x7f}}, {{&(0x7f0000003c80)=@rc, 0x80, &(0x7f0000004080), 0x0, &(0x7f0000004100)=""/93, 0x5d}}], 0x2, 0x40010022, &(0x7f0000004380)={0x0, r2+10000000}) 15:12:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 668.061509] binder: 28119:28122 transaction failed 29189/-22, size 40-8 line 3012 15:12:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:52 executing program 4: clone(0x38646276a7dc37ef, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000140), 0xfffffffffffffffe) 15:12:52 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 668.571101] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 15:12:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='codepage=874']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2efe2ee52e2e2e0062872ad0bd27e530037b1ed7667c8a62f33e4320aeffae869468d920944daa07ccd7919fe0b019b3e2458ee32043f7e1571abc455e9e2b58f6e1b8bfe1cd420fc5994a000000000068242f33772b70c2f1f3824d4a12", 0x1ff) 15:12:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x0, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 668.714933] binder: 28135:28140 transaction failed 29189/-22, size 40-8 line 3012 15:12:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:53 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40a5) write(r0, &(0x7f0000000400)="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", 0x200) 15:12:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="480000001400199009004b0101048c590a880900000000000000fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c80000000000000000f5ffffffffffffff00eaf60d1812", 0x48}], 0x1) 15:12:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x0, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 669.169094] FAT-fs (loop2): bogus number of reserved sectors [ 669.217592] FAT-fs (loop2): Can't find a valid FAT filesystem 15:12:53 executing program 2: r0 = socket$inet(0x2, 0x800000000002, 0x0) recvmsg(r0, &(0x7f0000002680)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000003440)=""/4096, 0x3f9}], 0x1, &(0x7f00000014c0)=""/251, 0xfb}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) 15:12:53 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40a5) write(r0, &(0x7f0000000400)="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", 0x200) [ 669.359478] binder: 28158:28161 transaction failed 29189/-22, size 40-8 line 3012 15:12:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:12:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x0, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 669.798920] kauditd_printk_skb: 555 callbacks suppressed [ 669.798926] audit: type=1400 audit(1538147574.074:37702): avc: denied { map } for pid=28165 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:54 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 669.949771] audit: type=1400 audit(1538147574.124:37703): avc: denied { map } for pid=28165 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x6, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4064, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x9, 0x0, 0x0, 0x100000000, 0x0, 0xfd, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x7}, 0x0, 0xf, 0xffffffffffffff9c, 0xa) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 15:12:54 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40a5) write(r0, &(0x7f0000000400)="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", 0x200) 15:12:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 670.200094] audit: type=1400 audit(1538147574.214:37704): avc: denied { map } for pid=28177 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:54 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0x0, 0x40c001) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) fallocate(r0, 0x3, 0x0, 0xfff9) [ 670.367473] audit: type=1400 audit(1538147574.214:37705): avc: denied { map } for pid=28175 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x0, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 670.467053] audit: type=1400 audit(1538147574.214:37706): avc: denied { map } for pid=28175 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 670.608428] audit: type=1400 audit(1538147574.214:37707): avc: denied { map } for pid=28177 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:55 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40a5) write(r0, &(0x7f0000000400)="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", 0x200) [ 670.649703] binder_alloc: 28194: binder_alloc_buf, no vma [ 670.649742] binder: 28194:28203 transaction failed 29189/-3, size 40-8 line 3135 15:12:55 executing program 2: [ 670.709315] audit: audit_backlog=65 > audit_backlog_limit=64 15:12:55 executing program 0: [ 670.709322] audit: audit_lost=1853 audit_rate_limit=0 audit_backlog_limit=64 [ 670.709325] audit: backlog limit exceeded [ 670.725590] audit: audit_backlog=65 > audit_backlog_limit=64 15:12:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x0, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:55 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 671.317776] binder_alloc: 28215: binder_alloc_buf, no vma 15:12:55 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40a5) 15:12:55 executing program 2: [ 671.388051] binder: 28215:28219 transaction failed 29189/-3, size 40-8 line 3135 15:12:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:55 executing program 0: 15:12:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x0, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:56 executing program 2: 15:12:56 executing program 4: ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40a5) 15:12:56 executing program 0: [ 671.990465] binder_alloc: 28235: binder_alloc_buf, no vma [ 672.051067] binder: 28235:28241 transaction failed 29189/-3, size 40-8 line 3135 15:12:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x8, 0x4, 0x4, 0xdc00, 0x0, 0xffffffffffffffff, 0x0, [0x8]}, 0x2c) 15:12:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x0, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:56 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:56 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40a5) 15:12:56 executing program 0: epoll_create(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 672.705774] binder_alloc: 28255: binder_alloc_buf, no vma [ 672.742951] binder: 28255:28257 transaction failed 29189/-3, size 40-8 line 3135 15:12:57 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x8005, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024", 0x31, 0x400}], 0x0, &(0x7f0000000140)) 15:12:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x0, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:12:57 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40a5) [ 673.351694] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 673.407482] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 673.465463] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:12:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 673.482609] binder_alloc: 28276: binder_alloc_buf, no vma [ 673.482663] binder: 28276:28280 transaction failed 29189/-3, size 40-8 line 3135 15:12:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)}}], 0x0, 0x0, &(0x7f0000000440)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 673.652667] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 15:12:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x0, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 673.720227] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 673.767808] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 15:12:58 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:12:58 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) [ 673.850396] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.890976] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 674.046431] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 15:12:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 674.074178] binder_alloc: 28291: binder_alloc_buf, no vma [ 674.074208] binder: 28291:28293 transaction failed 29189/-3, size 40-8 line 3135 15:12:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000fe000)={0x7, 0x3, &(0x7f0000401fd8), &(0x7f000038d000)='GPL\x00', 0x6, 0x1000, &(0x7f00006b2000)=""/4096}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) [ 674.236244] binder: 28295:28298 transaction failed 29189/-22, size 0-0 line 3012 [ 674.236419] binder: undelivered TRANSACTION_ERROR: 29189 15:12:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 674.255848] binder: 28295:28298 transaction failed 29189/-22, size 0-0 line 3012 [ 674.256714] binder: undelivered TRANSACTION_ERROR: 29189 [ 674.466938] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 15:12:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x200) 15:12:58 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) [ 674.701650] binder: 28312:28314 transaction failed 29189/-22, size 40-8 line 3012 15:12:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) close(r0) [ 674.802827] kauditd_printk_skb: 510 callbacks suppressed [ 674.802833] audit: type=1400 audit(1538147579.074:38143): avc: denied { map } for pid=28317 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 674.983710] audit: type=1400 audit(1538147579.114:38145): avc: denied { map } for pid=28317 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:59 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 15:12:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 675.168717] audit: type=1400 audit(1538147579.144:38146): avc: denied { map } for pid=28317 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:59 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={@remote, @remote}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 675.337480] audit: type=1400 audit(1538147579.144:38147): avc: denied { map } for pid=28315 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:12:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:12:59 executing program 0: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000f28ff8), 0x100000002) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) [ 675.421149] binder: 28329:28332 transaction failed 29189/-22, size 40-8 line 3012 [ 675.549005] audit: type=1400 audit(1538147579.144:38148): avc: denied { map } for pid=28315 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 675.663264] audit: audit_backlog=65 > audit_backlog_limit=64 15:13:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x63) [ 675.663270] audit: audit_lost=1879 audit_rate_limit=0 audit_backlog_limit=64 15:13:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x20000000000007}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 675.663274] audit: backlog limit exceeded [ 675.665108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 675.665113] audit: audit_lost=1880 audit_rate_limit=0 audit_backlog_limit=64 [ 675.969285] binder: 28343:28347 transaction failed 29189/-22, size 40-8 line 3012 15:13:00 executing program 1: syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 15:13:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0x0, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000040)="1a0345", 0x3}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 15:13:00 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001800)={@rand_addr, @local}, &(0x7f0000001840)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 15:13:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x800020, &(0x7f0000009000)}) 15:13:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0x0, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:01 executing program 2: 15:13:03 executing program 0: 15:13:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x800020, &(0x7f0000009000)}) 15:13:03 executing program 4: 15:13:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0x0, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:03 executing program 2: 15:13:03 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/79, 0x4f, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:03 executing program 4: 15:13:03 executing program 2: 15:13:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x800020, &(0x7f0000009000)}) 15:13:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x3, &(0x7f0000b0afd8), &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:03 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') preadv(r2, &(0x7f0000000480), 0x10000000000001ed, 0x0) socket$netlink(0x10, 0x3, 0x0) 15:13:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @rand_addr}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 15:13:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) 15:13:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 679.830368] kauditd_printk_skb: 573 callbacks suppressed [ 679.830377] audit: type=1400 audit(1538147584.114:38622): avc: denied { map } for pid=28431 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:04 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) dup(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x1000000000000110) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) 15:13:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x3, &(0x7f0000b0afd8), &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 680.044041] audit: type=1400 audit(1538147584.114:38623): avc: denied { prog_run } for pid=28430 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:13:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) [ 680.248031] audit: type=1400 audit(1538147584.114:38624): avc: denied { map } for pid=28433 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 680.461318] audit: type=1400 audit(1538147584.154:38625): avc: denied { map } for pid=28431 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) 15:13:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x3, &(0x7f0000b0afd8), &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delneigh={0x30, 0x1d, 0x405, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0) 15:13:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)={{0x3}}) [ 680.518950] binder: 28444:28448 got transaction with invalid offset (0, min 0 max 0) or object. [ 680.518990] binder: 28444:28448 transaction failed 29201/-22, size 0-8 line 3198 [ 680.519955] binder: undelivered TRANSACTION_ERROR: 29201 [ 680.718000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 680.718007] audit: audit_lost=1914 audit_rate_limit=0 audit_backlog_limit=64 [ 680.718010] audit: backlog limit exceeded [ 680.722609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 680.722613] audit: audit_lost=1915 audit_rate_limit=0 audit_backlog_limit=64 [ 680.722617] audit: backlog limit exceeded 15:13:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000026c000), &(0x7f000000afd0)=[0x0]}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 681.189443] binder: 28467:28470 got transaction with invalid offset (0, min 0 max 0) or object. 15:13:05 executing program 2: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0)=0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0xfeffffff) [ 681.189498] binder: 28467:28470 transaction failed 29201/-22, size 0-8 line 3198 15:13:05 executing program 0: r0 = socket$inet(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x2, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'sed\x00'}, 0x7) 15:13:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:05 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 681.190199] binder: undelivered TRANSACTION_ERROR: 29201 15:13:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 681.859897] binder: 28481:28488 got transaction with invalid offset (0, min 0 max 0) or object. [ 681.916175] binder: 28481:28488 transaction failed 29201/-22, size 0-8 line 3198 [ 681.968377] binder: undelivered TRANSACTION_ERROR: 29201 15:13:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x800020, &(0x7f0000009000)}) 15:13:06 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000000efd4)={0xa, 0x2, 0x8c6d, 0x7}, 0x2c) 15:13:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @local}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='veth0_to_bridge\x00'}) 15:13:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 682.675099] binder: release 28509:28511 transaction 213 out, still active 15:13:07 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)=@routing, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 682.736220] binder: undelivered TRANSACTION_COMPLETE 15:13:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140), 0x4) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000180)="450ff1c5650fef6c1f00d9ce410f1837c4e2ed0040ee38211a01b56d9950030000c4c15172e1518f89509b530dc4c1f810fc") [ 682.783042] binder: send failed reply for transaction 213, target dead 15:13:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 15:13:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x800020, &(0x7f0000009000)}) [ 683.296117] binder: release 28522:28528 transaction 215 out, still active [ 683.316718] binder: undelivered TRANSACTION_COMPLETE [ 683.346230] binder: send failed reply for transaction 215, target dead 15:13:07 executing program 2: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) close(r0) 15:13:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 683.854830] binder: release 28545:28549 transaction 217 out, still active [ 683.872564] binder: undelivered TRANSACTION_COMPLETE [ 683.926609] binder: send failed reply for transaction 217, target dead 15:13:08 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x20100, 0x0) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x8040, 0x844) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r1, &(0x7f0000000000)=""/127, 0x2fb) 15:13:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180), 0xfcfdffff00000000}]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x101000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) r2 = dup2(r0, r0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f00000001c0)='syz_tun\x00', 0xfff}) r3 = getpid() fcntl$setown(r2, 0x8, r3) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0xfffffffffffffff8) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/54) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000400)=ANY=[]) 15:13:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:08 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000500)=""/22) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300090468fe0700000000020700ff3f03000000450001070004001419001a00040002100300005a49c693008aa159ab0900000000", 0x39}], 0x1) 15:13:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) [ 684.852957] kauditd_printk_skb: 711 callbacks suppressed [ 684.852977] audit: type=1400 audit(1538147589.134:39076): avc: denied { map } for pid=28571 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace(0x4209, r3) 15:13:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x0, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 685.166900] audit: type=1400 audit(1538147589.134:39077): avc: denied { map } for pid=28572 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000004300)={&(0x7f0000000180), 0xc, &(0x7f00000042c0)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4, 0x5}}}]}, 0x38}}, 0x0) [ 685.366074] audit: type=1400 audit(1538147589.134:39078): avc: denied { map } for pid=28578 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:09 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 685.374252] audit: audit_backlog=65 > audit_backlog_limit=64 15:13:09 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x40001d, 0x6ff, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 685.374258] audit: audit_lost=2003 audit_rate_limit=0 audit_backlog_limit=64 15:13:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 685.374261] audit: backlog limit exceeded 15:13:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x0, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000), &(0x7f000000a000)='T}\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0xc3, &(0x7f0000011f3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019fd8)={r0, 0x0, 0xe, 0x5, &(0x7f0000019fe6)="db2940cbe03940971b61e96e7139", &(0x7f0000019000)=""/5}, 0x28) [ 685.385235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 685.385239] audit: audit_lost=2004 audit_rate_limit=0 audit_backlog_limit=64 [ 685.385242] audit: backlog limit exceeded [ 685.393820] FAT-fs (loop0): codepage cp437 not found [ 685.399282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 686.307916] input: syz1 as /devices/virtual/input/input22 15:13:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) 15:13:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) shutdown(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = accept(r1, &(0x7f00004e4000)=@hci, &(0x7f00003e9ffc)=0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) [ 686.422132] input: syz1 as /devices/virtual/input/input23 15:13:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x0, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:11 executing program 4: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:11 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net\x00') fstat(r0, &(0x7f0000000000)) 15:13:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100090c0902fcff0000040e05a5", 0x58}], 0x1) 15:13:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:11 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:12 executing program 1: perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4) 15:13:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:12 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'nq\x00'}, 0x2c) [ 687.924951] input: syz1 as /devices/virtual/input/input24 [ 687.961958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=28675 comm=syz-executor4 15:13:12 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000280)='.', &(0x7f0000000040)="ff7f000073", 0x1004, 0x0) 15:13:12 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:12 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) lseek(r0, 0x0, 0x0) [ 688.686044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=28692 comm=syz-executor4 15:13:13 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) [ 688.871810] input: syz1 as /devices/virtual/input/input25 15:13:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00pu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x80000000032, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000180)=""/114, 0x10) 15:13:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x20000000000007}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 689.349280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=28711 comm=syz-executor4 15:13:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:13 executing program 4: socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000117b43242e810862f71123e48080b729770affffba010000000009b356da5a80d18be31f", 0x4c}], 0x1}, 0x0) 15:13:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)="6f6f6d5f61646a00000026e7080900000000") sendfile(r1, r0, &(0x7f0000000000)=0x4f, 0x1) 15:13:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:14 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 689.886804] kauditd_printk_skb: 632 callbacks suppressed [ 689.886812] audit: type=1400 audit(1538147594.154:39544): avc: denied { map } for pid=28718 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040), 0xc, &(0x7f0000003a80)={&(0x7f0000003240)={0x58, r1, 0x225, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 15:13:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}, @map]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 690.122375] audit: type=1400 audit(1538147594.204:39545): avc: denied { map } for pid=28718 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:14 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 15:13:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 690.263701] syz-executor1 (28731): /proc/28728/oom_adj is deprecated, please use /proc/28728/oom_score_adj instead. 15:13:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 690.344928] audit: type=1400 audit(1538147594.234:39546): avc: denied { map_create } for pid=28721 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 690.523459] audit: type=1400 audit(1538147594.234:39547): avc: denied { map_read map_write } for pid=28721 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:13:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 15:13:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}, @map]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) [ 690.757732] audit: audit_backlog=65 > audit_backlog_limit=64 15:13:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 690.757738] audit: audit_lost=2061 audit_rate_limit=0 audit_backlog_limit=64 [ 690.757741] audit: backlog limit exceeded [ 690.762522] audit: audit_backlog=65 > audit_backlog_limit=64 [ 690.762527] audit: audit_lost=2062 audit_rate_limit=0 audit_backlog_limit=64 [ 690.762530] audit: backlog limit exceeded 15:13:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:15 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e2800", 0x26}], 0x1}, 0x0) 15:13:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@srh, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment, 0x0) 15:13:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r0}, @map]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:16 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 15:13:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0xfffffffffffffffe) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:16 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:16 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a", 0x13}], 0x1}, 0x0) 15:13:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x255, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 15:13:17 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a", 0x13}], 0x1}, 0x0) 15:13:17 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 692.833475] input: syz1 as /devices/virtual/input/input32 15:13:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socket$inet(0x2, 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:17 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a", 0x13}], 0x1}, 0x0) 15:13:17 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) ioctl(r0, 0x8000, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 693.501490] input: syz1 as /devices/virtual/input/input33 15:13:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socket$inet(0x2, 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:18 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c", 0x1d}], 0x1}, 0x0) 15:13:18 executing program 2: unshare(0x24020400) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) [ 694.312537] input: syz1 as /devices/virtual/input/input34 15:13:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socket$inet(0x2, 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:18 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:18 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c", 0x1d}], 0x1}, 0x0) 15:13:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = memfd_create(&(0x7f0000000000)="67889e43f63b753f302504a6d6940191226bb1c98550c1297a80f67f2e52f13d89353e4785908a02a4c4c2823d631c03077d680000520d9b8030bf32cc29fcd9c9459e9bfcd7b2cd5e95aa7eeddce6ad0df6329691736c4959674d1ac2354e497a822c3a31e29f2962e13cadde4b287fa58e73ee6f7119f8f160f2e246159231f7deba0f17b85351829820a9142268aeaf3bc60530e057e10710e53d84dae92b38eb43aad7d6994bbbf118109828b228e2270922f5144e2adaa30a7955f2e98372bdd39234aabecb3369f93d9dc7b5b37180bb01c9298da197bc2d14682c2ac209a4197c3e97211104e802078a793323c2d40ff988d9a3", 0x4) fstatfs(r1, &(0x7f0000000100)=""/229) [ 694.914473] kauditd_printk_skb: 544 callbacks suppressed [ 694.914494] audit: type=1400 audit(1538147599.194:39951): avc: denied { map } for pid=28863 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:19 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c", 0x1d}], 0x1}, 0x0) 15:13:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 694.926791] input: syz1 as /devices/virtual/input/input35 [ 695.255692] audit: type=1400 audit(1538147599.244:39952): avc: denied { map } for pid=28862 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:19 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 695.493105] audit: type=1400 audit(1538147599.244:39953): avc: denied { map } for pid=28862 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:19 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1004000000016) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4) [ 695.740196] input: syz1 as /devices/virtual/input/input36 [ 695.743799] audit: audit_backlog=65 > audit_backlog_limit=64 15:13:20 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400", 0x22}], 0x1}, 0x0) [ 695.743806] audit: audit_lost=2110 audit_rate_limit=0 audit_backlog_limit=64 15:13:20 executing program 0: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0x0, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) [ 695.743810] audit: backlog limit exceeded [ 695.758914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 695.758921] audit: audit_lost=2111 audit_rate_limit=0 audit_backlog_limit=64 [ 695.758925] audit: backlog limit exceeded 15:13:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 695.770423] audit: audit_backlog=65 > audit_backlog_limit=64 15:13:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:20 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400", 0x22}], 0x1}, 0x0) 15:13:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:20 executing program 0: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0x0, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:21 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400", 0x22}], 0x1}, 0x0) 15:13:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f00000001c0)="10"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0xe630c4000000000}], 0x0, 0x0, &(0x7f0000000100)}) 15:13:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xe, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x5, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0x0, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) 15:13:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:23 executing program 0: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:23 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 15:13:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r1, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:23 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400", 0x22}], 0x1}, 0x0) 15:13:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000000480)}) [ 699.286196] binder: 28957:28959 BC_DEAD_BINDER_DONE 0e630c4000000000 not found 15:13:23 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400", 0x22}], 0x1}, 0x0) [ 699.391918] binder: 28957:28959 tried to acquire reference to desc 0, got 1 instead [ 699.404861] binder: 28957:28965 unknown command 536872576 [ 699.404872] binder: 28957:28965 ioctl c0306201 20008fd0 returned -22 15:13:23 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000d2aa85), 0x0, 0x0, &(0x7f00004d4fe4)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 15:13:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 699.701534] binder: 28969:28972 BC_FREE_BUFFER u0000000020ffc000 matched unreturned buffer [ 699.760555] binder_alloc: 28969:28972 FREE_BUFFER u0000000020ffc000 user freed buffer twice [ 699.814799] binder: 28969:28972 BC_FREE_BUFFER u0000000020ffc000 no match 15:13:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:24 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400", 0x22}], 0x1}, 0x0) 15:13:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xd0, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0x1b5) [ 699.941650] kauditd_printk_skb: 453 callbacks suppressed [ 699.941659] audit: type=1400 audit(1538147604.224:40370): avc: denied { map } for pid=28969 comm="syz-executor5" path="/dev/binder0" dev="devtmpfs" ino=5425 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 699.942327] binder_alloc: binder_alloc_mmap_handler: 28969 20001000-20004000 already mapped failed -16 15:13:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 699.952421] binder: BINDER_SET_CONTEXT_MGR already set 15:13:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c860a881700f217e0060000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00000000000000000000", 0x48}], 0x1) [ 699.952432] binder: 28969:28981 ioctl 40046207 0 returned -16 [ 699.954014] binder_alloc: 28969: binder_alloc_buf, no vma 15:13:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 699.954039] binder: 28969:28972 transaction failed 29189/-3, size 24-8 line 3135 15:13:24 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff", 0x23}], 0x1}, 0x0) [ 699.959892] binder_alloc: 28969: binder_alloc_buf, no vma [ 699.959919] binder: 28969:28981 transaction failed 29189/-3, size 0-0 line 3135 15:13:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 699.960437] binder: release 28969:28972 transaction 226 out, still active [ 699.960442] binder: undelivered TRANSACTION_COMPLETE [ 699.960461] binder: undelivered TRANSACTION_ERROR: 29189 [ 699.960503] binder: send failed reply for transaction 223 to 28969:28972 15:13:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB='filter'], 0x1) [ 700.042614] binder: undelivered TRANSACTION_ERROR: 29189 [ 700.043385] binder: unexpected work type, 4, not freed [ 700.043388] binder: undelivered TRANSACTION_COMPLETE 15:13:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 700.043397] binder: undelivered TRANSACTION_ERROR: 29189 [ 700.043418] binder: send failed reply for transaction 226, target dead 15:13:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="000000037970652700000004000000070000204500000000", 0x18, 0x0) [ 700.804596] audit: type=1400 audit(1538147604.204:40369): avc: denied { map } for pid=28977 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:25 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff", 0x23}], 0x1}, 0x0) 15:13:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 700.989668] input: syz1 as /devices/virtual/input/input40 [ 701.000399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 701.000406] audit: audit_lost=2125 audit_rate_limit=0 audit_backlog_limit=64 [ 701.000409] audit: backlog limit exceeded [ 701.044223] audit: audit_backlog=65 > audit_backlog_limit=64 [ 701.044230] audit: audit_lost=2126 audit_rate_limit=0 audit_backlog_limit=64 [ 701.044235] audit: backlog limit exceeded 15:13:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) [ 701.044314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 701.044320] audit: audit_lost=2127 audit_rate_limit=0 audit_backlog_limit=64 15:13:25 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff", 0x23}], 0x1}, 0x0) 15:13:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 701.586342] input: syz1 as /devices/virtual/input/input41 15:13:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000000100)}, 0x0) 15:13:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="fb", 0x1}]) 15:13:26 executing program 4: unshare(0x20000400) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 15:13:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:26 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x14, &(0x7f0000ca3000)=[{&(0x7f00000b4000)=""/15, 0xf}, {&(0x7f0000f6afa9)=""/87, 0x57}, {&(0x7f00008e3f35)=""/203, 0xcb}, {&(0x7f0000cd5ffe)=""/2, 0x2}], 0x4, &(0x7f0000a01f13)=""/237, 0xed}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x0, 0x6, 0x1}]}, &(0x7f0000f59000)='GPL\x00', 0x200003ff, 0xfe32, &(0x7f00005d4000)=""/251}, 0x48) [ 702.570160] device lo left promiscuous mode 15:13:26 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000b75fd4)={0x2000000000000e, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000879000)={r0, &(0x7f00009cff8f), &(0x7f0000afe000), 0x3}, 0x20) 15:13:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)) 15:13:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}}, &(0x7f0000003ff6)="47501e58", 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 15:13:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:27 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc), 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ef, 0x0) 15:13:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080), 0x3) 15:13:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) [ 703.863676] input: syz1 as /devices/virtual/input/input45 15:13:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc), 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x9, @local, 0x80000000}}, {{0xa, 0x4e23, 0x9, @dev, 0x8}}}, 0x108) 15:13:28 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast, [], 0x128, 0x128, 0x170, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [], @local}}}}, @quota={'quota\x00', 0x18}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"95065deba0aee3e4d2418cbb0187f2074e0349954b022b1f67521d0ef3c3"}}}]}]}, 0x278) 15:13:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r0, 0xa, 0x2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={r1, r0, 0xa, 0x2}, 0x48) [ 704.580890] input: syz1 as /devices/virtual/input/input46 15:13:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc), 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:29 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f000089b000)=0xffffffffffffffff, 0x4) 15:13:29 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000187000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000013000)) [ 705.061618] kauditd_printk_skb: 423 callbacks suppressed [ 705.061626] audit: type=1400 audit(1538147609.344:40742): avc: denied { map } for pid=29126 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:29 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000040)) [ 705.274545] input: syz1 as /devices/virtual/input/input47 [ 705.332787] audit: type=1400 audit(1538147609.344:40743): avc: denied { map } for pid=29128 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 705.575219] audit: type=1400 audit(1538147609.344:40744): avc: denied { map } for pid=29128 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 705.637632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.637638] audit: audit_lost=2145 audit_rate_limit=0 audit_backlog_limit=64 15:13:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 705.637642] audit: backlog limit exceeded 15:13:30 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') sigaltstack(&(0x7f0000fee000/0x12000)=nil, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) [ 705.639914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.639920] audit: audit_lost=2146 audit_rate_limit=0 audit_backlog_limit=64 [ 705.639923] audit: backlog limit exceeded 15:13:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) [ 705.665064] audit: audit_backlog=65 > audit_backlog_limit=64 15:13:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') pread64(r0, &(0x7f00000000c0)=""/100, 0x64, 0x800000000000000) 15:13:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000280), 0x3ca) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) 15:13:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x49, &(0x7f0000000080), 0x0) 15:13:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000003580)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="c1", 0x1, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x0, @broadcast}, 0x10) 15:13:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 15:13:31 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x10, 0xbd, &(0x7f0000000140)="bc15a54b0e46cdc214c494cbfc7e04c2", &(0x7f0000000380)=""/189, 0x869c}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 15:13:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 707.622223] input: syz1 as /devices/virtual/input/input51 15:13:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 15:13:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340), 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:32 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x21, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f630c400000000000000000000000000563044000000000056304400000000005"], 0x0, 0x0, &(0x7f0000000040)}) 15:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) [ 708.182183] input: syz1 as /devices/virtual/input/input52 15:13:32 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f00000a3000)='./file0\x00', &(0x7f00007cfffa)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000), &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) mount(&(0x7f000052f000), &(0x7f00008fcfff)='.', &(0x7f00003a2ffa)="0700cc667300", 0x1000, 0x0) mount(&(0x7f00005f7000), &(0x7f0000846fff)='.', &(0x7f0000543000)='mqueue\x00', 0x0, &(0x7f000095df11)) 15:13:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 15:13:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 708.503303] binder: 29233:29235 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 708.560172] binder: 29233:29235 Acquire 1 refcount change on invalid ref 0 ret -22 [ 708.628128] binder: 29233:29235 Acquire 1 refcount change on invalid ref 0 ret -22 [ 708.673347] binder: 29233:29235 unknown command 5 15:13:33 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/53, 0x35, 0x41) 15:13:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff) chown(&(0x7f00000003c0)='./file1\x00', 0xee00, 0xffffffffffffffff) [ 708.720495] binder: 29233:29235 ioctl c0306201 20000140 returned -22 15:13:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000c80)=@polexpire={0xc0, 0x1b, 0x227, 0x0, 0x0, {{{@in=@rand_addr}, {}, {}, 0x0, 0x6e6bbd}}}, 0xc0}}, 0x0) [ 708.785592] input: syz1 as /devices/virtual/input/input53 [ 708.800952] binder: 29233:29246 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 708.800967] binder: 29233:29246 Acquire 1 refcount change on invalid ref 0 ret -22 [ 708.800978] binder: 29233:29246 Acquire 1 refcount change on invalid ref 0 ret -22 [ 708.800985] binder: 29233:29246 unknown command 5 15:13:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 708.800995] binder: 29233:29246 ioctl c0306201 20000140 returned -22 15:13:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 15:13:33 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00009b5000/0x3000)=nil, 0xd5ff438933b6e90a, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) 15:13:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 15:13:33 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x0) [ 709.876110] input: syz1 as /devices/virtual/input/input54 15:13:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 15:13:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x8, 0x4) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000340)="59000000140019232b834b80043f679a10ff6400940005002a925aaa000000000100008400f0fffeff2c707f8f00ff050000000010000100090a1000410400000000fcff00000000000000000000000000000000000000000f", 0x59}], 0x1) [ 710.074102] kauditd_printk_skb: 465 callbacks suppressed [ 710.074111] audit: type=1400 audit(1538147614.354:41094): avc: denied { map } for pid=29271 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:34 executing program 5: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 710.305219] audit: type=1400 audit(1538147614.414:41095): avc: denied { map } for pid=29271 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:34 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') [ 710.494366] audit: type=1400 audit(1538147614.414:41096): avc: denied { map } for pid=29271 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:34 executing program 5: r0 = memfd_create(&(0x7f0000000440)='$\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) fstatfs(r0, &(0x7f0000000100)=""/229) 15:13:34 executing program 2: pipe2(&(0x7f0000f14000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xb, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="060063efff7f00009d", 0x9, 0xffff000000000000}]) 15:13:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 15:13:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:35 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004fd4)={0xb, 0xb, 0x3, 0x8, 0x11}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0xe, 0x1000}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000b000), &(0x7f0000001000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000001cfe0)={r0, &(0x7f0000013000), &(0x7f0000007000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000017000)={r0, &(0x7f0000017000)}, 0x10) [ 710.610367] input: syz1 as /devices/virtual/input/input55 [ 710.795445] audit: type=1400 audit(1538147614.424:41097): avc: denied { map } for pid=29275 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 710.970094] audit: type=1400 audit(1538147614.424:41098): avc: denied { map } for pid=29275 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 711.145723] audit: type=1400 audit(1538147614.464:41099): avc: denied { map } for pid=29275 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0015000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) 15:13:35 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x33, &(0x7f0000000180)={0x77359400}, 0x10) [ 711.244512] audit: audit_backlog=65 > audit_backlog_limit=64 [ 711.244518] audit: audit_lost=2186 audit_rate_limit=0 audit_backlog_limit=64 15:13:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 15:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r0, &(0x7f0000001380)=""/4096, 0x1000) getdents64(r0, &(0x7f00000000c0)=""/57, 0x39) [ 711.244523] audit: backlog limit exceeded [ 711.250653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 711.308911] input: syz1 as /devices/virtual/input/input56 15:13:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 711.646198] netlink: 9 bytes leftover after parsing attributes in process `syz-executor5'. [ 711.728289] netlink: 9 bytes leftover after parsing attributes in process `syz-executor5'. [ 711.824927] netlink: 9 bytes leftover after parsing attributes in process `syz-executor5'. [ 711.896219] netlink: 9 bytes leftover after parsing attributes in process `syz-executor5'. 15:13:36 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 712.048439] input: syz1 as /devices/virtual/input/input57 15:13:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r1) 15:13:36 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:36 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x9, 0x0) dup2(r0, r1) 15:13:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000005c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, &(0x7f000000a000)) listxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)=""/131, 0x83) 15:13:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:37 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') 15:13:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x20000000000000, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) dup2(r1, r0) 15:13:37 executing program 5: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 15:13:37 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x20) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) creat(&(0x7f0000000140)='./control/file0\x00', 0x2) 15:13:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa6, 0x40000c9, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@srh, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x0) 15:13:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mprotect(&(0x7f000072e000/0x3000)=nil, 0x3000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mprotect(&(0x7f0000000000/0x800000)=nil, 0x804000, 0x0) 15:13:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffffa6, 0x0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 15:13:38 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:38 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000f09000)={0x1, 0x9, 0xb94f, 0x4}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000531000)={r0, &(0x7f0000ab5fff), &(0x7f0000daa000)}, 0x18) 15:13:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000030c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003c00)={&(0x7f0000000040), 0xc, &(0x7f0000003bc0)={&(0x7f00000000c0)={0x58, r1, 0x7854e3c3fcb45e07, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 15:13:38 executing program 2: r0 = socket$inet(0x2, 0x80003, 0x5) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x10}}], 0x2, 0x0) 15:13:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x20) fcntl$notify(r0, 0x402, 0x1000000080000007) 15:13:38 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:38 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00003fe000)={0xffffffffffffffff}) tee(r1, r0, 0x80000001, 0x0) 15:13:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(r2, 0xc0046209, &(0x7f0000830f3b)=""/197) 15:13:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x15d, &(0x7f00000000c0)={@random="2fd6b1be27a3", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 15:13:39 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) setns(r0, 0x8020000) execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0) open(&(0x7f0000000300)='./file1/file0\x00', 0x121842, 0x81) set_robust_list(&(0x7f00000002c0)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x8, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x89) setns(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 15:13:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(r2, 0xc0046209, &(0x7f0000830f3b)=""/197) [ 715.082947] kauditd_printk_skb: 385 callbacks suppressed [ 715.082955] audit: type=1400 audit(1538147619.364:41423): avc: denied { map } for pid=29415 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) close(r0) 15:13:39 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) setresuid(r1, r1, r1) 15:13:39 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0) [ 715.284949] audit: type=1400 audit(1538147619.414:41424): avc: denied { map } for pid=29415 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:39 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(r2, 0xc0046209, &(0x7f0000830f3b)=""/197) [ 715.540647] audit: type=1400 audit(1538147619.424:41425): avc: denied { create } for pid=29390 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 715.684637] audit: type=1400 audit(1538147619.434:41427): avc: denied { ioctl } for pid=29390 comm="syz-executor1" path="socket:[75863]" dev="sockfs" ino=75863 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:13:40 executing program 4: mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x6, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 15:13:40 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x1e3, 0x0) 15:13:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="003f73000400000000001e"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001) [ 715.940293] audit: type=1400 audit(1538147619.424:41426): avc: denied { create } for pid=29390 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:13:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x760) getdents64(r1, &(0x7f0000000100)=""/81, 0x2be) 15:13:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(r2, 0xc0046209, &(0x7f0000830f3b)=""/197) [ 716.057882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.057889] audit: audit_lost=2208 audit_rate_limit=0 audit_backlog_limit=64 15:13:40 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100a07031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) [ 716.057893] audit: backlog limit exceeded [ 716.061902] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.061908] audit: audit_lost=2209 audit_rate_limit=0 audit_backlog_limit=64 15:13:40 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="2400000020002553075f2265ff72fc2281000000001000220ee1000c08000f0000001700", 0x24) 15:13:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="003f73000400000000001e"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001) 15:13:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ff8ffc)=0x8005, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000ff1000)={0xa, 0x4e20}, 0x1c) 15:13:41 executing program 2: syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0xc0046209, &(0x7f0000830f3b)=""/197) 15:13:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) 15:13:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 15:13:41 executing program 1: syz_emit_ethernet(0x163, &(0x7f0000000000)={@random="77b0e1efedfa", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x155, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x11, 0x0, 0x0, @empty, "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"}}}}}, &(0x7f0000aed000)={0x1, 0x4, [0x6, 0xfffffffffffffffe, 0x2000000000000004, 0x100000]}) 15:13:41 executing program 5: mlockall(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x13, 0x32, 0xffffffffffffffff, 0x0) 15:13:41 executing program 0: r0 = socket(0x11, 0x400000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000f6bffb), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) 15:13:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(r1, 0xc0046209, &(0x7f0000830f3b)=""/197) [ 717.365373] PF_BRIDGE: RTM_SETLINK with unknown ifindex 15:13:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept4(r2, &(0x7f0000000000)=@xdp, &(0x7f0000000180)=0x80, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 15:13:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) 15:13:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$ASHMEM_GET_NAME(r1, 0xc0046209, &(0x7f0000830f3b)=""/197) [ 717.925593] PF_BRIDGE: RTM_SETLINK with unknown ifindex 15:13:42 executing program 0: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000015000)=@can, 0x10, &(0x7f0000015000), 0x0, &(0x7f0000015000)=""/23, 0x17}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 15:13:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r1, &(0x7f0000000040)=r3, 0x12) 15:13:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000000000000028000007a0a00fffffffffd630148"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x84000001, 0x3342, &(0x7f0000000300)=""/187}, 0x48) 15:13:42 executing program 2: syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$ASHMEM_GET_NAME(r1, 0xc0046209, &(0x7f0000830f3b)=""/197) 15:13:42 executing program 3: r0 = gettid() prctl$intptr(0x1d, 0xfffffffffffff2fd) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000000)) tkill(r0, 0x1000000000016) 15:13:42 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 15:13:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000600)="f8f56030", 0x4) sendto$inet6(r0, &(0x7f0000000100)="0b0400000000ffffffff", 0xa, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [], @remote}}, 0x1c) 15:13:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @link_local, [], 0xf0, 0xf0, 0x120, [@limit={'limit\x00', 0x20, {{0x0, 0x2}}}, @cluster={'cluster\x00', 0x10}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'dumm\\0\x00', 'lo\x00', 'rose0\x00', "467dac2e895fc5d400000000a85f00", @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x2c8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15:13:43 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(r1, 0xc0046209, &(0x7f0000830f3b)=""/197) 15:13:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000200)={0x6, @empty, 0x0, 0x4, 'lc\x00'}, 0x2c) 15:13:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, r3) keyctl$unlink(0x9, r4, 0xfffffffffffffffd) 15:13:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000006000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0xc0046209, &(0x7f0000830f3b)=""/197) 15:13:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000003, 0x7) getsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f00000002c0)=""/4096, &(0x7f0000000240)=0x9be) 15:13:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x6af) 15:13:43 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x0, &(0x7f0000000280)) [ 720.128422] kauditd_printk_skb: 361 callbacks suppressed [ 720.128430] audit: type=1400 audit(1538147624.404:41752): avc: denied { map } for pid=29564 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.201951] audit: type=1400 audit(1538147624.404:41753): avc: denied { map } for pid=29564 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.255660] audit: type=1400 audit(1538147624.404:41754): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.315960] audit: type=1400 audit(1538147624.404:41755): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.342069] audit: type=1400 audit(1538147624.474:41756): avc: denied { map } for pid=29564 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.371891] audit: type=1400 audit(1538147624.474:41757): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.397828] audit: type=1400 audit(1538147624.474:41758): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.424115] audit: type=1400 audit(1538147624.494:41759): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.449320] audit: type=1400 audit(1538147624.494:41760): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 720.473540] audit: type=1400 audit(1538147624.534:41761): avc: denied { map } for pid=29564 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x8080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x20000000000007}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 15:13:45 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x5, &(0x7f00000000c0)={0x0, 'ip6gretap0\x00'}, 0x18) 15:13:45 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0x8) fallocate(r0, 0x0, 0x0, 0x3ff) write$cgroup_subtree(r0, &(0x7f0000000140), 0x0) 15:13:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 15:13:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x6, 0x8]}, 0x48, r1}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0x4}, 0x1c) getsockopt(r0, 0x2, 0x0, &(0x7f0000000200)=""/114, &(0x7f00000000c0)=0x72) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 15:13:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"98655f683046fd0400d6ae00", 0x1}) ioctl$TUNDETACHFILTER(r0, 0x800454e1, 0x0) 15:13:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x4, 0x518, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0\x00', 'vcan0\x00', 'bridge_slave_1\x00', @broadcast, [], @remote, [], 0x70, 0xa0, 0xd0}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'bridge0\x00', 'veth0\x00', 'veth1_to_bridge\x00', 'nr0\x00', @dev, [], @empty, [], 0x70, 0xd8, 0x108}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@mark={'mark\x00', 0x10}]}, @common=@STANDARD={'\x00', 0x8}}, {{{0x17, 0x0, 0x0, 'veth1_to_bridge\x00', 'eql\x00', 'bond_slave_0\x00', 'teql0\x00', @empty, [], @dev, [], 0x70, 0xa0, 0xf0}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'rose0\x00', 'bond_slave_1\x00', 'veth1_to_team\x00', 'ipddp0\x00', @empty, [], @broadcast, [], 0xe0, 0x148, 0x190, [@rateest={'rateest\x00', 0x48, {{'ip6tnl0\x00', 'ip6_vti0\x00'}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@dnat={'dnat\x00', 0x10, {{@link_local}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x590) 15:13:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007e9000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000618000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000836000)=0xfffffffffffff000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 15:13:46 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000fffc0c0000000000000000000000a1bb0037725ef198d1cf8438db25f35b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3b4c1b4e2bf501fb1bb949869c2984d914d9f4c005e66cd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff"], 0x82}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) 15:13:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000040)=""/67, 0x43) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) dup3(r1, r0, 0x0) 15:13:46 executing program 3: r0 = socket$inet(0x10, 0x10000000000002, 0x9) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000e90307031dfffd946f61830002200a0009000001ff1c40000c1ba33becf7e943", 0x24}], 0x1}, 0x0) 15:13:46 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040), 0xc, &(0x7f0000003a80)={&(0x7f0000003240)={0x60, r1, 0x225, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 15:13:46 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:13:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) 15:13:47 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) 15:13:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 15:13:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @broadcast}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in6=@local, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80, 0x5e}, {}, {0x9, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {{}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb71}}, 0xe8) 15:13:48 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000500)=0x8f, 0xdfd7) 15:13:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000007126000000000000bf67000000000000570600000f0000006706000002000000070600000ee619f2bf250000000000001f6500000000000067070000000000000707000099741df70f75000000000000bf5400000000000007000000040000003d43010000000000950000000000000061160000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:13:48 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:48 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x2c, @remote, 0x4e21, 0x4, 'ovf\x00', 0x8}, 0x2c) 15:13:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 15:13:48 executing program 3: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) symlinkat(&(0x7f0000000000)='./control\x00', r0, &(0x7f0000000100)='./control\x00') unlinkat(r0, &(0x7f0000000080)='./control\x00', 0x0) 15:13:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x5, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) timer_getoverrun(0x0) 15:13:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x28, &(0x7f00000003c0)}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000480), &(0x7f0000000440)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) 15:13:48 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mount(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r2) 15:13:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61) read(r0, &(0x7f00000000c0)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x5437, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:13:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r0) 15:13:49 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xfffffed1) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') open(&(0x7f0000000240)='./file0/file0\x00', 0x40, 0x0) readahead(r0, 0x0, 0x0) 15:13:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:49 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x4) [ 725.397533] kauditd_printk_skb: 286 callbacks suppressed [ 725.397546] audit: type=1400 audit(1538147629.674:42048): avc: denied { map } for pid=29685 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 725.549332] audit: type=1400 audit(1538147629.704:42049): avc: denied { map } for pid=29688 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) close(r0) 15:13:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081f8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 725.689389] audit: type=1400 audit(1538147629.714:42050): avc: denied { map } for pid=29688 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 725.785744] binder_alloc: binder_alloc_mmap_handler: 29700 20000000-20001000 already mapped failed -16 [ 725.910733] audit: type=1400 audit(1538147629.734:42051): avc: denied { map } for pid=29688 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 726.046276] audit: type=1400 audit(1538147629.744:42052): avc: denied { map } for pid=29688 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000600)="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", 0x1000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 15:13:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) [ 726.150729] audit: type=1400 audit(1538147629.744:42053): avc: denied { map } for pid=29685 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0xf}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) [ 726.216084] audit: type=1400 audit(1538147629.764:42054): avc: denied { map } for pid=29685 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:50 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) [ 726.249038] audit: type=1400 audit(1538147629.764:42055): avc: denied { map } for pid=29685 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:50 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000003240)=[{&(0x7f0000002040)="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", 0x1f7, 0x9}]) [ 726.310406] audit: type=1400 audit(1538147629.764:42056): avc: denied { map } for pid=29688 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 726.461130] audit: type=1400 audit(1538147629.794:42057): avc: denied { map } for pid=29685 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0xfffffffffffffffd, &(0x7f00000000c0)) getitimer(0x0, &(0x7f0000000040)) 15:13:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000006) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100090c0900fcff0000040e05a5", 0x58}], 0x1) 15:13:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f00005e2fe8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x5}}, &(0x7f0000fd2ff6)='syzkaller\x00', 0xffffffffffff8342, 0x99, &(0x7f0000901f67)=""/153}, 0x48) 15:13:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 15:13:51 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x7b}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 15:13:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x400023) gettid() ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 15:13:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 727.307298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 15:13:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000001, 0x4) sendmmsg(r0, &(0x7f0000006440)=[{{&(0x7f0000004c00)=@hci, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004c80)="610f90c7e7b8d5ede7f1ab948aea67a918c59a", 0x13}], 0x1, &(0x7f0000004e80)}}, {{&(0x7f0000005040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006180)=[{&(0x7f00000050c0)="bb", 0x1}], 0x1, &(0x7f00000061c0)}}], 0x2, 0x0) 15:13:51 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:13:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:52 executing program 3: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1ed47d3ddd0bf63f) fchown(r0, 0x0, 0x0) 15:13:52 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e23}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f00000002c0)=@ipx={0x4, 0x0, 0x0, "90d1e4ffbee1"}, 0x80, &(0x7f0000003bc0), 0x0, &(0x7f0000003c40)}}], 0x300, 0x0) 15:13:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:52 executing program 5: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x704000) 15:13:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local}]}, 0x38}}, 0x0) 15:13:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/37, 0x25) getdents64(r0, &(0x7f0000000100)=""/190, 0xbe) 15:13:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={@multicast2, @rand_addr}, &(0x7f0000000440)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000280)=0x1c6) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000002c0)) 15:13:53 executing program 5: mmap(&(0x7f0000000000/0x1c000)=nil, 0x1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f0000002ff8)) 15:13:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:53 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x4}, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:13:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x4) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 15:13:54 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000480)=0xdbc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xb00, 0x4) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvfrom$inet6(r0, &(0x7f0000002980)=""/227, 0xe3, 0x12020, 0x0, 0x0) 15:13:54 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) [ 730.423500] kauditd_printk_skb: 353 callbacks suppressed [ 730.423508] audit: type=1400 audit(1538147634.704:42411): avc: denied { map } for pid=29837 comm="blkid" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 730.624113] audit: type=1400 audit(1538147634.784:42412): avc: denied { map } for pid=29841 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:13:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000100)=[@enter_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}}], 0x48, 0x0, &(0x7f0000000280)="df0e7f8db1d86acef7b098275cbb4bb24860bfe2de3d6972ddc5f44dda657937f0cfef51fc935fca921bb355b078839b88a07b921e8c30edcbeedf377732999549572c014c078c37"}) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000300)}) [ 730.820125] audit: type=1400 audit(1538147634.784:42413): avc: denied { map } for pid=29837 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 730.981125] audit: type=1400 audit(1538147634.784:42414): avc: denied { map } for pid=29837 comm="blkid" path="/lib/x86_64-linux-gnu/libblkid.so.1.1.0" dev="sda1" ino=2825 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:55 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) [ 731.110181] audit: type=1400 audit(1538147634.794:42415): avc: denied { map } for pid=29841 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:55 executing program 5: mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) 15:13:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 731.282320] audit: type=1400 audit(1538147634.814:42417): avc: denied { map } for pid=29841 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000100)=[@enter_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}}], 0x48, 0x0, &(0x7f0000000280)="df0e7f8db1d86acef7b098275cbb4bb24860bfe2de3d6972ddc5f44dda657937f0cfef51fc935fca921bb355b078839b88a07b921e8c30edcbeedf377732999549572c014c078c37"}) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000300)}) [ 731.353852] binder: 29853:29855 got reply transaction with no transaction stack [ 731.353858] binder: 29853:29855 transaction failed 29201/-71, size 0-0 line 2920 15:13:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) [ 731.381863] binder: 29853:29858 got reply transaction with no transaction stack [ 731.381874] binder: 29853:29858 transaction failed 29201/-71, size 0-0 line 2920 15:13:55 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000000400)}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) 15:13:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 731.382014] binder: 29853:29858 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 731.602951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.602958] audit: audit_lost=2222 audit_rate_limit=0 audit_backlog_limit=64 [ 731.602962] audit: backlog limit exceeded 15:13:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x8}) [ 731.614656] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.964616] binder: 29869:29871 Acquire 1 refcount change on invalid ref 0 ret -22 15:13:56 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mount(&(0x7f000000a000), &(0x7f0000000580)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000700)) umount2(&(0x7f0000000200)='./file0\x00', 0x4) umount2(&(0x7f0000000040)='./file0\x00', 0x4) [ 732.016145] binder: 29869:29873 got reply transaction with no transaction stack 15:13:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 732.016155] binder: 29869:29873 transaction failed 29201/-71, size 0-0 line 2920 15:13:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) [ 732.017977] binder: 29869:29873 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 15:13:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003740)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) dup3(r1, r0, 0x0) readv(r0, &(0x7f0000005b40)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1) 15:13:56 executing program 5: perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000000060001, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7}, 0x7) 15:13:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:13:57 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) dup3(r1, r0, 0x0) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000000000002ee5ff810000000"], 0x10}, 0x0) 15:13:57 executing program 5: perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x7a) sendto$inet(r0, &(0x7f0000617fc9), 0xfe41, 0x100000020000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback, [0x22b]}, 0x10) 15:13:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003740)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) dup3(r1, r0, 0x0) readv(r0, &(0x7f0000005b40)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1) 15:13:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:13:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:57 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003740)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) dup3(r1, r0, 0x0) readv(r0, &(0x7f0000005b40)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1) 15:13:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000200)="02000000020001000003be8c5ee17688", 0x10) 15:13:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:13:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:58 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003740)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) dup3(r1, r0, 0x0) readv(r0, &(0x7f0000005b40)=[{&(0x7f0000003940)=""/4096, 0x1000}], 0x1) 15:13:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x84e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000001600), 0x0, 0x2000200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) close(r0) 15:13:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x200, 0x0, 0x25dfdbfe}, 0x14}}, 0x4040) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:13:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:13:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x38, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 15:13:59 executing program 4: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 15:13:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:13:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="84fbfaad42f28960", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:13:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/76) 15:13:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 735.453282] kauditd_printk_skb: 326 callbacks suppressed [ 735.453292] audit: type=1400 audit(1538147639.734:42699): avc: denied { map } for pid=29962 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:13:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:13:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:13:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 15:13:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x411}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="59e66b2e", 0x4}], 0x1, 0x0) [ 735.680082] audit: type=1400 audit(1538147639.734:42700): avc: denied { map } for pid=29962 comm="blkid" path="/lib/x86_64-linux-gnu/libuuid.so.1.3.0" dev="sda1" ino=2819 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:14:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 735.860086] audit: type=1400 audit(1538147639.804:42701): avc: denied { map } for pid=29972 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 736.004577] audit: type=1400 audit(1538147639.804:42702): avc: denied { map } for pid=29972 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:14:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettaction={0x28, 0x30, 0x801, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) 15:14:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) [ 736.195736] audit: type=1400 audit(1538147639.844:42703): avc: denied { map } for pid=29972 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 736.305204] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 736.305348] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 15:14:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 736.350294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 736.421036] audit: type=1400 audit(1538147639.844:42704): avc: denied { map } for pid=29972 comm="blkid" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 736.440138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 15:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:14:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a040007000000000013002d54036205001a00000ce600001000e0c90002000000000000001000930000000000f0ffffff000b02000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) [ 736.568093] audit: audit_backlog=65 > audit_backlog_limit=64 [ 736.568100] audit: audit_lost=2238 audit_rate_limit=0 audit_backlog_limit=64 15:14:00 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x35a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 15:14:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) [ 736.568103] audit: backlog limit exceeded [ 736.575480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 736.593144] audit: audit_backlog=65 > audit_backlog_limit=64 15:14:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:14:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 15:14:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020700011000000000000000000000000800120000000300000000000000004006000000000000000000000000000000e00000010000000000000000000000000000000000ffff000000000000000000030006fc0000000000000080ac14ffbb00000000000000000300295c1e5e8673b6b0423b1d8603c92b91c52000009200"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000021e, 0x0) 15:14:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:14:01 executing program 5: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)="0000000201000000000000010400000000000000", 0x14, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)) [ 737.190200] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 15:14:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:14:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:14:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:14:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:14:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, 0x0, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:14:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x0) listen(r1, 0x0) 15:14:02 executing program 4: syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e000000160000002e0000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)) 15:14:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) 15:14:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee"], 0x45) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:14:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, 0x0, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:14:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:14:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, 0x0, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 15:14:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000001800000007000000000000009500000000000000"], &(0x7f0000014ff5)="73797a6b610000000500f3", 0x3, 0x1000, &(0x7f00000003c0)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x9d, &(0x7f00000000c0)="e46001923406080000000a9b86dd", &(0x7f0000000300)=""/157}, 0x28) 15:14:03 executing program 3: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/49, 0x31}], 0x1) 15:14:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee"], 0x45) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:14:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 739.951118] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 739.957837] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 740.052352] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 740.112080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 15:14:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='/dev/input/event#\x00'}, 0x10) [ 740.153907] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 740.193002] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 740.266192] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 15:14:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000003c0)) 15:14:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee"], 0x45) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 740.295434] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p21 15:14:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) 15:14:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) [ 740.385345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 740.413423] loop5: p1 start 1 is beyond EOD, truncated [ 740.413479] loop5: p2 size 2 extends beyond EOD, truncated [ 740.450570] loop5: p3 start 201 is beyond EOD, truncated [ 740.450579] loop5: p4 start 301 is beyond EOD, truncated [ 740.450587] loop5: p5 start 1 is beyond EOD, truncated [ 740.450595] loop5: p6 start 1 is beyond EOD, truncated [ 740.450603] loop5: p7 start 1 is beyond EOD, truncated [ 740.450611] loop5: p8 start 1 is beyond EOD, truncated [ 740.450619] loop5: p9 start 1 is beyond EOD, truncated [ 740.450627] loop5: p10 start 1 is beyond EOD, truncated [ 740.450635] loop5: p11 start 1 is beyond EOD, truncated [ 740.450642] loop5: p12 start 1 is beyond EOD, truncated [ 740.450650] loop5: p13 start 1 is beyond EOD, truncated [ 740.450658] loop5: p14 start 1 is beyond EOD, truncated [ 740.450666] loop5: p15 start 1 is beyond EOD, truncated [ 740.450674] loop5: p16 start 1 is beyond EOD, truncated [ 740.450681] loop5: p17 start 1 is beyond EOD, truncated [ 740.450689] loop5: p18 start 1 is beyond EOD, truncated [ 740.450696] loop5: p19 start 1 is beyond EOD, truncated [ 740.450704] loop5: p20 start 1 is beyond EOD, truncated [ 740.450711] loop5: p21 start 1 is beyond EOD, truncated [ 740.450718] loop5: p22 start 1 is beyond EOD, truncated [ 740.450725] loop5: p23 start 1 is beyond EOD, truncated [ 740.450733] loop5: p24 start 1 is beyond EOD, truncated [ 740.450740] loop5: p25 start 1 is beyond EOD, truncated [ 740.450747] loop5: p26 start 1 is beyond EOD, truncated [ 740.450754] loop5: p27 start 1 is beyond EOD, truncated [ 740.450760] loop5: p28 start 1 is beyond EOD, truncated [ 740.450768] loop5: p29 start 1 is beyond EOD, truncated [ 740.450776] loop5: p30 start 1 is beyond EOD, truncated [ 740.450784] loop5: p31 start 1 is beyond EOD, truncated [ 740.450792] loop5: p32 start 1 is beyond EOD, truncated [ 740.450799] loop5: p33 start 1 is beyond EOD, truncated [ 740.450807] loop5: p34 start 1 is beyond EOD, truncated [ 740.450815] loop5: p35 start 1 is beyond EOD, truncated [ 740.450823] loop5: p36 start 1 is beyond EOD, truncated [ 740.450830] loop5: p37 start 1 is beyond EOD, truncated [ 740.450838] loop5: p38 start 1 is beyond EOD, truncated [ 740.450846] loop5: p39 start 1 is beyond EOD, truncated [ 740.450854] loop5: p40 start 1 is beyond EOD, truncated [ 740.450862] loop5: p41 start 1 is beyond EOD, truncated [ 740.450870] loop5: p42 start 1 is beyond EOD, truncated [ 740.450877] loop5: p43 start 1 is beyond EOD, truncated [ 740.450885] loop5: p44 start 1 is beyond EOD, truncated [ 740.450893] loop5: p45 start 1 is beyond EOD, truncated [ 740.450900] loop5: p46 start 1 is beyond EOD, truncated [ 740.450908] loop5: p47 start 1 is beyond EOD, truncated [ 740.450916] loop5: p48 start 1 is beyond EOD, truncated [ 740.450924] loop5: p49 start 1 is beyond EOD, truncated [ 740.450930] loop5: p50 start 1 is beyond EOD, truncated [ 740.450937] loop5: p51 start 1 is beyond EOD, truncated [ 740.450944] loop5: p52 start 1 is beyond EOD, truncated [ 740.450950] loop5: p53 start 1 is beyond EOD, truncated [ 740.450957] loop5: p54 start 1 is beyond EOD, truncated [ 740.450978] loop5: p55 start 1 is beyond EOD, truncated [ 740.450984] loop5: p56 start 1 is beyond EOD, truncated [ 740.450991] loop5: p57 start 1 is beyond EOD, truncated [ 740.451010] loop5: p58 start 1 is beyond EOD, truncated [ 740.451031] loop5: p59 start 1 is beyond EOD, truncated [ 740.451039] loop5: p60 start 1 is beyond EOD, truncated [ 740.451048] loop5: p61 start 1 is beyond EOD, truncated [ 740.451057] loop5: p62 start 1 is beyond EOD, truncated [ 740.451065] loop5: p63 start 1 is beyond EOD, truncated [ 740.451074] loop5: p64 start 1 is beyond EOD, truncated [ 740.451083] loop5: p65 start 1 is beyond EOD, truncated [ 740.451093] loop5: p66 start 1 is beyond EOD, truncated [ 740.451102] loop5: p67 start 1 is beyond EOD, truncated [ 740.451125] loop5: p68 start 1 is beyond EOD, truncated [ 740.451146] loop5: p69 start 1 is beyond EOD, truncated [ 740.451155] loop5: p70 start 1 is beyond EOD, truncated [ 740.451164] loop5: p71 start 1 is beyond EOD, truncated [ 740.451172] loop5: p72 start 1 is beyond EOD, truncated [ 740.451181] loop5: p73 start 1 is beyond EOD, truncated [ 740.451189] loop5: p74 start 1 is beyond EOD, truncated [ 740.451198] loop5: p75 start 1 is beyond EOD, truncated [ 740.451207] loop5: p76 start 1 is beyond EOD, truncated [ 740.451216] loop5: p77 start 1 is beyond EOD, truncated [ 740.451225] loop5: p78 start 1 is beyond EOD, truncated [ 740.451234] loop5: p79 start 1 is beyond EOD, truncated [ 740.451243] loop5: p80 start 1 is beyond EOD, truncated [ 740.451251] loop5: p81 start 1 is beyond EOD, truncated [ 740.451268] loop5: p82 start 1 is beyond EOD, truncated [ 740.451276] loop5: p83 start 1 is beyond EOD, truncated [ 740.451284] loop5: p84 start 1 is beyond EOD, truncated [ 740.451291] loop5: p85 start 1 is beyond EOD, truncated [ 740.451310] loop5: p86 start 1 is beyond EOD, truncated [ 740.451317] loop5: p87 start 1 is beyond EOD, truncated [ 740.451323] loop5: p88 start 1 is beyond EOD, truncated [ 740.451328] loop5: p89 start 1 is beyond EOD, truncated [ 740.451334] loop5: p90 start 1 is beyond EOD, truncated [ 740.451341] loop5: p91 start 1 is beyond EOD, truncated [ 740.451347] loop5: p92 start 1 is beyond EOD, truncated [ 740.451353] loop5: p93 start 1 is beyond EOD, truncated [ 740.451359] loop5: p94 start 1 is beyond EOD, truncated [ 740.451366] loop5: p95 start 1 is beyond EOD, truncated [ 740.451372] loop5: p96 start 1 is beyond EOD, truncated [ 740.451379] loop5: p97 start 1 is beyond EOD, truncated [ 740.451385] loop5: p98 start 1 is beyond EOD, truncated [ 740.451391] loop5: p99 start 1 is beyond EOD, truncated [ 740.451397] loop5: p100 start 1 is beyond EOD, truncated [ 740.451404] loop5: p101 start 1 is beyond EOD, truncated [ 740.451410] loop5: p102 start 1 is beyond EOD, truncated [ 740.451417] loop5: p103 start 1 is beyond EOD, truncated [ 740.451423] loop5: p104 start 1 is beyond EOD, truncated [ 740.451430] loop5: p105 start 1 is beyond EOD, truncated [ 740.451448] loop5: p106 start 1 is beyond EOD, truncated [ 740.451454] loop5: p107 start 1 is beyond EOD, truncated [ 740.451461] loop5: p108 start 1 is beyond EOD, truncated [ 740.451467] loop5: p109 start 1 is beyond EOD, truncated [ 740.451474] loop5: p110 start 1 is beyond EOD, truncated [ 740.451480] loop5: p111 start 1 is beyond EOD, truncated [ 740.451487] loop5: p112 start 1 is beyond EOD, truncated [ 740.451502] loop5: p113 start 1 is beyond EOD, truncated [ 740.451509] loop5: p114 start 1 is beyond EOD, truncated [ 740.451516] loop5: p115 start 1 is beyond EOD, truncated [ 740.451534] loop5: p116 start 1 is beyond EOD, truncated [ 740.451541] loop5: p117 start 1 is beyond EOD, truncated [ 740.451547] loop5: p118 start 1 is beyond EOD, truncated [ 740.451554] loop5: p119 start 1 is beyond EOD, truncated [ 740.451561] loop5: p120 start 1 is beyond EOD, truncated [ 740.451567] loop5: p121 start 1 is beyond EOD, truncated [ 740.451574] loop5: p122 start 1 is beyond EOD, truncated [ 740.451581] loop5: p123 start 1 is beyond EOD, truncated [ 740.451587] loop5: p124 start 1 is beyond EOD, truncated [ 740.451594] loop5: p125 start 1 is beyond EOD, truncated [ 740.451613] loop5: p126 start 1 is beyond EOD, truncated [ 740.451620] loop5: p127 start 1 is beyond EOD, truncated [ 740.451627] loop5: p128 start 1 is beyond EOD, truncated [ 740.451646] loop5: p129 start 1 is beyond EOD, truncated [ 740.451653] loop5: p130 start 1 is beyond EOD, truncated [ 740.451660] loop5: p131 start 1 is beyond EOD, truncated [ 740.451668] loop5: p132 start 1 is beyond EOD, truncated [ 740.451675] loop5: p133 start 1 is beyond EOD, truncated [ 740.451682] loop5: p134 start 1 is beyond EOD, truncated [ 740.451689] loop5: p135 start 1 is beyond EOD, truncated [ 740.451696] loop5: p136 start 1 is beyond EOD, truncated [ 740.451704] loop5: p137 start 1 is beyond EOD, truncated [ 740.451711] loop5: p138 start 1 is beyond EOD, truncated [ 740.451718] loop5: p139 start 1 is beyond EOD, truncated [ 740.451725] loop5: p140 start 1 is beyond EOD, truncated [ 740.451732] loop5: p141 start 1 is beyond EOD, truncated [ 740.451739] loop5: p142 start 1 is beyond EOD, truncated [ 740.451747] loop5: p143 start 1 is beyond EOD, truncated [ 740.451754] loop5: p144 start 1 is beyond EOD, truncated [ 740.451760] loop5: p145 start 1 is beyond EOD, truncated [ 740.451768] loop5: p146 start 1 is beyond EOD, truncated [ 740.451775] loop5: p147 start 1 is beyond EOD, truncated [ 740.451782] loop5: p148 start 1 is beyond EOD, truncated [ 740.451790] loop5: p149 start 1 is beyond EOD, truncated [ 740.451797] loop5: p150 start 1 is beyond EOD, truncated [ 740.451804] loop5: p151 start 1 is beyond EOD, truncated [ 740.451811] loop5: p152 start 1 is beyond EOD, truncated [ 740.451818] loop5: p153 start 1 is beyond EOD, truncated [ 740.451825] loop5: p154 start 1 is beyond EOD, truncated [ 740.451832] loop5: p155 start 1 is beyond EOD, truncated [ 740.451839] loop5: p156 start 1 is beyond EOD, truncated [ 740.451847] loop5: p157 start 1 is beyond EOD, truncated [ 740.451853] loop5: p158 start 1 is beyond EOD, truncated [ 740.451860] loop5: p159 start 1 is beyond EOD, truncated [ 740.451866] loop5: p160 start 1 is beyond EOD, truncated [ 740.451873] loop5: p161 start 1 is beyond EOD, truncated [ 740.451880] loop5: p162 start 1 is beyond EOD, truncated [ 740.451886] loop5: p163 start 1 is beyond EOD, truncated [ 740.451893] loop5: p164 start 1 is beyond EOD, truncated [ 740.451900] loop5: p165 start 1 is beyond EOD, truncated [ 740.451907] loop5: p166 start 1 is beyond EOD, truncated [ 740.451914] loop5: p167 start 1 is beyond EOD, truncated [ 740.451921] loop5: p168 start 1 is beyond EOD, truncated [ 740.451928] loop5: p169 start 1 is beyond EOD, truncated [ 740.451935] loop5: p170 start 1 is beyond EOD, truncated [ 740.451942] loop5: p171 start 1 is beyond EOD, truncated [ 740.451949] loop5: p172 start 1 is beyond EOD, truncated [ 740.451956] loop5: p173 start 1 is beyond EOD, truncated [ 740.451962] loop5: p174 start 1 is beyond EOD, truncated [ 740.451969] loop5: p175 start 1 is beyond EOD, truncated [ 740.451976] loop5: p176 start 1 is beyond EOD, truncated [ 740.451982] loop5: p177 start 1 is beyond EOD, truncated [ 740.451989] loop5: p178 start 1 is beyond EOD, truncated [ 740.451996] loop5: p179 start 1 is beyond EOD, truncated [ 740.452003] loop5: p180 start 1 is beyond EOD, truncated [ 740.452009] loop5: p181 start 1 is beyond EOD, truncated [ 740.452016] loop5: p182 start 1 is beyond EOD, truncated [ 740.452023] loop5: p183 start 1 is beyond EOD, truncated [ 740.452029] loop5: p184 start 1 is beyond EOD, truncated [ 740.452036] loop5: p185 start 1 is beyond EOD, truncated [ 740.452042] loop5: p186 start 1 is beyond EOD, truncated [ 740.452049] loop5: p187 start 1 is beyond EOD, truncated [ 740.452057] loop5: p188 start 1 is beyond EOD, truncated [ 740.452064] loop5: p189 start 1 is beyond EOD, truncated [ 740.452071] loop5: p190 start 1 is beyond EOD, truncated [ 740.452078] loop5: p191 start 1 is beyond EOD, truncated [ 740.452085] loop5: p192 start 1 is beyond EOD, truncated [ 740.452092] loop5: p193 start 1 is beyond EOD, truncated [ 740.452099] loop5: p194 start 1 is beyond EOD, truncated [ 740.452105] loop5: p195 start 1 is beyond EOD, truncated [ 740.452113] loop5: p196 start 1 is beyond EOD, truncated [ 740.452120] loop5: p197 start 1 is beyond EOD, truncated [ 740.452140] loop5: p198 start 1 is beyond EOD, truncated [ 740.452160] loop5: p199 start 1 is beyond EOD, truncated [ 740.452167] loop5: p200 start 1 is beyond EOD, truncated [ 740.452173] loop5: p201 start 1 is beyond EOD, truncated [ 740.452180] loop5: p202 start 1 is beyond EOD, truncated [ 740.452186] loop5: p203 start 1 is beyond EOD, truncated [ 740.452193] loop5: p204 start 1 is beyond EOD, truncated [ 740.452200] loop5: p205 start 1 is beyond EOD, truncated [ 740.452207] loop5: p206 start 1 is beyond EOD, truncated [ 740.452213] loop5: p207 start 1 is beyond EOD, truncated [ 740.452220] loop5: p208 start 1 is beyond EOD, truncated [ 740.452227] loop5: p209 start 1 is beyond EOD, truncated [ 740.452233] loop5: p210 start 1 is beyond EOD, truncated [ 740.452240] loop5: p211 start 1 is beyond EOD, truncated [ 740.452246] loop5: p212 start 1 is beyond EOD, truncated [ 740.452253] loop5: p213 start 1 is beyond EOD, truncated [ 740.452270] loop5: p214 start 1 is beyond EOD, truncated [ 740.452276] loop5: p215 start 1 is beyond EOD, truncated [ 740.452283] loop5: p216 start 1 is beyond EOD, truncated [ 740.452289] loop5: p217 start 1 is beyond EOD, truncated [ 740.452295] loop5: p218 start 1 is beyond EOD, truncated [ 740.452301] loop5: p219 start 1 is beyond EOD, truncated [ 740.452308] loop5: p220 start 1 is beyond EOD, truncated [ 740.452315] loop5: p221 start 1 is beyond EOD, truncated [ 740.452321] loop5: p222 start 1 is beyond EOD, truncated [ 740.452328] loop5: p223 start 1 is beyond EOD, truncated [ 740.452335] loop5: p224 start 1 is beyond EOD, truncated [ 740.452342] loop5: p225 start 1 is beyond EOD, truncated [ 740.452348] loop5: p226 start 1 is beyond EOD, truncated [ 740.452355] loop5: p227 start 1 is beyond EOD, truncated [ 740.452362] loop5: p228 start 1 is beyond EOD, truncated [ 740.452368] loop5: p229 start 1 is beyond EOD, truncated [ 740.452374] loop5: p230 start 1 is beyond EOD, truncated [ 740.452381] loop5: p231 start 1 is beyond EOD, truncated [ 740.452387] loop5: p232 start 1 is beyond EOD, truncated [ 740.452394] loop5: p233 start 1 is beyond EOD, truncated [ 740.452400] loop5: p234 start 1 is beyond EOD, truncated [ 740.452407] loop5: p235 start 1 is beyond EOD, truncated [ 740.452414] loop5: p236 start 1 is beyond EOD, truncated [ 740.452421] loop5: p237 start 1 is beyond EOD, truncated [ 740.452427] loop5: p238 start 1 is beyond EOD, truncated [ 740.452434] loop5: p239 start 1 is beyond EOD, truncated [ 740.452440] loop5: p240 start 1 is beyond EOD, truncated [ 740.452447] loop5: p241 start 1 is beyond EOD, truncated [ 740.452466] loop5: p242 start 1 is beyond EOD, truncated [ 740.452485] loop5: p243 start 1 is beyond EOD, truncated [ 740.452492] loop5: p244 start 1 is beyond EOD, truncated [ 740.452508] loop5: p245 start 1 is beyond EOD, truncated [ 740.452515] loop5: p246 start 1 is beyond EOD, truncated [ 740.452523] loop5: p247 start 1 is beyond EOD, truncated [ 740.452530] loop5: p248 start 1 is beyond EOD, truncated [ 740.452537] loop5: p249 start 1 is beyond EOD, truncated [ 740.452544] loop5: p250 start 1 is beyond EOD, truncated [ 740.452551] loop5: p251 start 1 is beyond EOD, truncated [ 740.452558] loop5: p252 start 1 is beyond EOD, truncated [ 740.452565] loop5: p253 start 1 is beyond EOD, truncated [ 740.452572] loop5: p254 start 1 is beyond EOD, truncated [ 740.452580] loop5: p255 start 1 is beyond EOD, truncated [ 740.752007] sched: DL replenish lagged too much [ 740.752031] ------------[ cut here ]------------ [ 740.752947] WARNING: CPU: 0 PID: 30135 at kernel/sched/deadline.c:222 task_non_contending+0xa45/0xf40 [ 740.752950] Kernel panic - not syncing: panic_on_warn set ... [ 740.752950] [ 740.752954] CPU: 0 PID: 30135 Comm: syz-executor3 Not tainted 4.14.72+ #11 [ 740.752955] Call Trace: [ 740.752959] dump_stack+0xb9/0x11b [ 740.752966] ? task_non_contending+0xa40/0xf40 [ 740.752970] panic+0x1bf/0x3a4 [ 740.752974] ? add_taint.cold.4+0x16/0x16 [ 740.752984] ? __probe_kernel_read+0x163/0x1c0 [ 740.752989] ? task_non_contending+0xa45/0xf40 [ 740.752993] __warn.cold.7+0x148/0x185 [ 740.752997] ? task_non_contending+0xa45/0xf40 [ 740.753016] report_bug+0x1f7/0x26c [ 740.753022] do_error_trap+0x1ba/0x2c0 [ 740.753026] ? math_error+0x2d0/0x2d0 [ 740.753034] ? enqueue_task_dl+0xd80/0x2b10 [ 740.753038] ? lock_downgrade+0x560/0x560 [ 740.753043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.753049] invalid_op+0x18/0x40 [ 740.753055] RIP: 0010:task_non_contending+0xa45/0xf40 [ 740.753057] RSP: 0018:ffff8801c7ff7900 EFLAGS: 00010002 [ 740.753061] RAX: 0000000000000001 RBX: ffff8801c38bc680 RCX: 0000000000000000 [ 740.753063] RDX: 0000000000000000 RSI: ffff8801c38bc680 RDI: ffff8801dbb24a20 [ 740.753065] RBP: ffff8801c38bc6bc R08: 0000000000000001 R09: 0000000000000000 [ 740.753068] R10: ffff8801c38bced8 R11: 0000000000000001 R12: ffff8801c38bc9b8 [ 740.753070] R13: ffff8801dba00000 R14: 000000000002a240 R15: ffff8801c38bc680 [ 740.753079] ? dequeue_task_dl+0x33/0x530 [ 740.753083] ? deactivate_task+0x296/0x380 [ 740.753088] __schedule+0x9af/0x1ed0 [ 740.753094] ? __sched_text_start+0x8/0x8 [ 740.753098] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 740.753118] do_task_dead+0xc7/0x100 [ 740.753123] do_exit+0x1544/0x2800 [ 740.753130] ? mm_update_next_owner+0x670/0x670 [ 740.753137] ? get_signal+0x547/0x1470 [ 740.753141] ? lock_downgrade+0x560/0x560 [ 740.753145] ? get_signal+0x1da/0x1470 [ 740.753150] do_group_exit+0x100/0x2e0 [ 740.753155] get_signal+0x4e5/0x1470 [ 740.753158] ? trace_hardirqs_on+0x10/0x10 [ 740.753161] ? lock_acquire+0x10f/0x380 [ 740.753166] ? debug_check_no_obj_freed+0x150/0x77c [ 740.753197] do_signal+0x8f/0x1660 [ 740.753202] ? __might_fault+0x104/0x1b0 [ 740.753211] ? lock_downgrade+0x560/0x560 [ 740.753215] ? setup_sigcontext+0x810/0x810 [ 740.753220] ? __might_fault+0x177/0x1b0 [ 740.753224] ? retint_kernel+0x2d/0x2d [ 740.753231] ? do_futex+0x17b0/0x17b0 [ 740.753234] ? retint_kernel+0x2d/0x2d [ 740.753248] ? exit_to_usermode_loop+0xc6/0x150 [ 740.753259] exit_to_usermode_loop+0x116/0x150 [ 740.753297] do_syscall_64+0x35d/0x4b0 [ 740.753315] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 740.753319] RIP: 0033:0x457579 [ 740.753323] RSP: 002b:00007fc0cfa99cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 740.753335] RAX: fffffffffffffe00 RBX: 000000000072bfa8 RCX: 0000000000457579 [ 740.753339] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bfa8 [ 740.753346] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 740.753350] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bfac [ 740.753354] R13: 00007ffc382de54f R14: 00007fc0cfa9a9c0 R15: 0000000000000001 [ 740.753391] [ 740.753395] ====================================================== [ 740.753397] WARNING: possible circular locking dependency detected [ 740.753399] 4.14.72+ #11 Not tainted [ 740.753402] ------------------------------------------------------ [ 740.753405] syz-executor3/30135 is trying to acquire lock: [ 740.753406] ((console_sem).lock){-.-.}, at: [] down_trylock+0xe/0x70 [ 740.753413] [ 740.753415] but task is already holding lock: [ 740.753420] (&rq->lock){-.-.}, at: [] __schedule+0x19a/0x1ed0 [ 740.753427] [ 740.753432] which lock already depends on the new lock. [ 740.753433] [ 740.753435] [ 740.753437] the existing dependency chain (in reverse order) is: [ 740.753439] [ 740.753440] -> #2 (&rq->lock){-.-.}: [ 740.753447] _raw_spin_lock+0x2a/0x40 [ 740.753449] task_fork_fair+0x59/0x590 [ 740.753451] sched_fork+0x48b/0xd30 [ 740.753454] copy_process.part.6+0x120d/0x6530 [ 740.753478] _do_fork+0x1c2/0xd50 [ 740.753480] kernel_thread+0x2f/0x40 [ 740.753482] rest_init+0x22/0x2a0 [ 740.753484] start_kernel+0x6fb/0x739 [ 740.753486] secondary_startup_64+0xa5/0xb0 [ 740.753488] [ 740.753489] -> #1 (&p->pi_lock){-.-.}: [ 740.753496] _raw_spin_lock_irqsave+0x41/0x50 [ 740.753498] try_to_wake_up+0x95/0x1230 [ 740.753500] up+0x8d/0xd0 [ 740.753502] __up_console_sem+0x44/0x90 [ 740.753504] console_unlock+0x451/0xb50 [ 740.753506] vprintk_emit+0x112/0x150 [ 740.753508] vprintk_func+0x58/0x159 [ 740.753510] printk+0xa7/0xcf [ 740.753513] kauditd_hold_skb.cold.13+0x41/0x50 [ 740.753515] kauditd_send_queue+0xf9/0x140 [ 740.753517] kauditd_thread+0x4c7/0x660 [ 740.753519] kthread+0x348/0x420 [ 740.753521] ret_from_fork+0x3a/0x50 [ 740.753522] [ 740.753523] -> #0 ((console_sem).lock){-.-.}: [ 740.753531] lock_acquire+0x10f/0x380 [ 740.753533] _raw_spin_lock_irqsave+0x41/0x50 [ 740.753535] down_trylock+0xe/0x70 [ 740.753558] __down_trylock_console_sem+0x33/0xc0 [ 740.753563] console_trylock+0x13/0xf0 [ 740.753564] vprintk_emit+0x104/0x150 [ 740.753565] vprintk_func+0x58/0x159 [ 740.753566] printk+0xa7/0xcf [ 740.753567] __warn+0x36/0x50 [ 740.753568] report_bug+0x1f7/0x26c [ 740.753570] do_error_trap+0x1ba/0x2c0 [ 740.753571] invalid_op+0x18/0x40 [ 740.753572] task_non_contending+0xa45/0xf40 [ 740.753573] __schedule+0x9af/0x1ed0 [ 740.753574] do_task_dead+0xc7/0x100 [ 740.753576] do_exit+0x1544/0x2800 [ 740.753577] do_group_exit+0x100/0x2e0 [ 740.753578] get_signal+0x4e5/0x1470 [ 740.753579] do_signal+0x8f/0x1660 [ 740.753581] exit_to_usermode_loop+0x116/0x150 [ 740.753582] do_syscall_64+0x35d/0x4b0 [ 740.753583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 740.753584] [ 740.753585] other info that might help us debug this: [ 740.753586] [ 740.753587] Chain exists of: [ 740.753588] (console_sem).lock --> &p->pi_lock --> &rq->lock [ 740.753596] [ 740.753597] Possible unsafe locking scenario: [ 740.753598] [ 740.753599] CPU0 CPU1 [ 740.753603] ---- ---- [ 740.753603] lock(&rq->lock); [ 740.753606] lock(&p->pi_lock); [ 740.753609] lock(&rq->lock); [ 740.753611] lock((console_sem).lock); [ 740.753614] [ 740.753615] *** DEADLOCK *** [ 740.753615] [ 740.753617] 1 lock held by syz-executor3/30135: [ 740.753617] #0: (&rq->lock){-.-.}, at: [] __schedule+0x19a/0x1ed0 [ 740.753624] [ 740.753625] stack backtrace: [ 740.753627] CPU: 0 PID: 30135 Comm: syz-executor3 Not tainted 4.14.72+ #11 [ 740.753630] Call Trace: [ 740.753647] dump_stack+0xb9/0x11b [ 740.753649] print_circular_bug.isra.18.cold.43+0x2d3/0x40c [ 740.753650] ? save_trace+0xd6/0x250 [ 740.753651] __lock_acquire+0x2ff9/0x4320 [ 740.753652] ? trace_hardirqs_on+0x10/0x10 [ 740.753653] ? format_decode+0x188/0x8f0 [ 740.753655] ? set_precision+0x140/0x140 [ 740.753656] ? add_lock_to_list.isra.9+0x18c/0x310 [ 740.753657] ? kvm_clock_read+0x1f/0x30 [ 740.753658] ? kvm_sched_clock_read+0x5/0x10 [ 740.753660] ? sched_clock+0x5/0x10 [ 740.753661] ? sched_clock_cpu+0x143/0x1c0 [ 740.753662] lock_acquire+0x10f/0x380 [ 740.753663] ? down_trylock+0xe/0x70 [ 740.753664] ? vprintk_emit+0x9e/0x150 [ 740.753665] ? vprintk_emit+0x104/0x150 [ 740.753667] _raw_spin_lock_irqsave+0x41/0x50 [ 740.753668] ? down_trylock+0xe/0x70 [ 740.753669] down_trylock+0xe/0x70 [ 740.753670] __down_trylock_console_sem+0x33/0xc0 [ 740.753672] console_trylock+0x13/0xf0 [ 740.753673] vprintk_emit+0x104/0x150 [ 740.753674] ? task_non_contending+0xa45/0xf40 [ 740.753675] vprintk_func+0x58/0x159 [ 740.753676] printk+0xa7/0xcf [ 740.753678] ? show_regs_print_info+0x5b/0x5b [ 740.753679] ? __probe_kernel_read+0x163/0x1c0 [ 740.753680] __warn+0x36/0x50 [ 740.753681] ? task_non_contending+0xa45/0xf40 [ 740.753683] report_bug+0x1f7/0x26c [ 740.753684] do_error_trap+0x1ba/0x2c0 [ 740.753685] ? math_error+0x2d0/0x2d0 [ 740.753686] ? enqueue_task_dl+0xd80/0x2b10 [ 740.753687] ? lock_downgrade+0x560/0x560 [ 740.753689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.753692] invalid_op+0x18/0x40 [ 740.753694] RIP: 0010:task_non_contending+0xa45/0xf40 [ 740.753695] RSP: 0018:ffff8801c7ff7900 EFLAGS: 00010002 [ 740.753697] RAX: 0000000000000001 RBX: ffff8801c38bc680 RCX: 0000000000000000 [ 740.753699] RDX: 0000000000000000 RSI: ffff8801c38bc680 RDI: ffff8801dbb24a20 [ 740.753703] RBP: ffff8801c38bc6bc R08: 0000000000000001 R09: 0000000000000000 [ 740.753705] R10: ffff8801c38bced8 R11: 0000000000000001 R12: ffff8801c38bc9b8 [ 740.753706] R13: ffff8801dba00000 R14: 000000000002a240 R15: ffff8801c38bc680 [ 740.753708] ? dequeue_task_dl+0x33/0x530 [ 740.753709] ? deactivate_task+0x296/0x380 [ 740.753710] __schedule+0x9af/0x1ed0 [ 740.753711] ? __sched_text_start+0x8/0x8 [ 740.753713] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 740.753714] do_task_dead+0xc7/0x100 [ 740.753715] do_exit+0x1544/0x2800 [ 740.753716] ? mm_update_next_owner+0x670/0x670 [ 740.753717] ? get_signal+0x547/0x1470 [ 740.753718] ? lock_downgrade+0x560/0x560 [ 740.753720] ? get_signal+0x1da/0x1470 [ 740.753721] do_group_exit+0x100/0x2e0 [ 740.753722] get_signal+0x4e5/0x1470 [ 740.753723] ? trace_hardirqs_on+0x10/0x10 [ 740.753724] ? lock_acquire+0x10f/0x380 [ 740.753726] ? debug_check_no_obj_freed+0x150/0x77c [ 740.753727] do_signal+0x8f/0x1660 [ 740.753728] ? __might_fault+0x104/0x1b0 [ 740.753729] ? lock_downgrade+0x560/0x560 [ 740.753730] ? setup_sigcontext+0x810/0x810 [ 740.753732] ? __might_fault+0x177/0x1b0 [ 740.753744] ? retint_kernel+0x2d/0x2d [ 740.753746] ? do_futex+0x17b0/0x17b0 [ 740.753747] ? retint_kernel+0x2d/0x2d [ 740.753748] ? exit_to_usermode_loop+0xc6/0x150 [ 740.753749] exit_to_usermode_loop+0x116/0x150 [ 740.753750] do_syscall_64+0x35d/0x4b0 [ 740.753752] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 740.753753] RIP: 0033:0x457579 [ 740.753754] RSP: 002b:00007fc0cfa99cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 740.753763] RAX: fffffffffffffe00 RBX: 000000000072bfa8 RCX: 0000000000457579 [ 740.753765] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bfa8 [ 740.753767] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 740.753771] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bfac [ 740.753773] R13: 00007ffc382de54f R14: 00007fc0cfa9a9c0 R15: 0000000000000001 [ 741.930445] Shutting down cpus with NMI [ 741.931635] Kernel Offset: 0x13400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 744.331711] Rebooting in 86400 seconds..